last executing test programs: 3.201587052s ago: executing program 1 (id=234): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x8) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newspdinfo={0x1c, 0x24, 0x1, 0x70bd29, 0x25dfdbfb, 0xa, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000001}, 0x20024004) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x7, &(0x7f00000001c0)=0xffffdde4, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'gre0\x00'}) sendmsg$can_raw(r3, 0x0, 0x1) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)=""/157, 0x9d}], 0x1) 2.764822573s ago: executing program 3 (id=246): unshare(0x22020600) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') openat(r2, &(0x7f0000000c00)='auth.unix.ip/channel\x00', 0x2, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0x520, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x4000000000000000, 0x2668}, 0x10eccc, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000002, 0x4010, r3, 0x80000000) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x810) unshare(0x22020600) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x32, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0xf}}, {0x4e20, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x3, "9c25a81de3a2211c1c9e8d76fbc4353c3b368740cab8865b", "aff658c7f4edb9e8038258239716d9af58fdbf6a7e584c67e41c7c4be4c51180"}}}}}}, 0x0) 2.607841676s ago: executing program 2 (id=249): pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0xfffd, 0x0) mount_setattr(r1, &(0x7f0000000100)='./file0\x00', 0x800, 0x0, 0x0) epoll_create1(0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004"], 0x48) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) read$rfkill(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="180000880000000000080000feffffb64a30b700", @ANYRES32, @ANYBLOB="0000000002000000b703000000000000850000003b000000b7000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r2 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r1, 0xffffffffffffffff}, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000b00)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x7, 0x2}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4800}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x1d, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x107}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.575388267s ago: executing program 3 (id=250): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141b42, 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000880), 0xf504, r3}, 0x38) splice(r0, 0x0, r2, 0x0, 0x402000784853bb, 0x0) fcntl$setpipe(r1, 0x407, 0x2010001) write$P9_RLOPEN(r1, &(0x7f0000000180)={0x18, 0xd, 0x2, {{0x30, 0x3, 0x7}, 0xe}}, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000004bc0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a80000000060a010400000000000000000a0004050900010073797a310000000054000480500001800a000100696e6e65720000004000028008000440000000171c000580040001007061796c6f6164000c00028008000240000000000800034000000002080002400000008408000140000000000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) 2.409846411s ago: executing program 2 (id=251): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) unshare(0x6a040000) dup(0xffffffffffffffff) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0xfd, 0x0, 0x0, 0x10, 0x0, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x8800, 0xd95, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, 0x0, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x13, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r3, 0x18000000000002a0, 0xcc, 0x0, &(0x7f0000000380)="38f94ac6635e0bc1fff9e8b4d1a74a845722a0c647493925ebed8cedf82962aa7f6ce924ecaaab355d98c531f800dedb04a37e07e4a8b1ee2bbb52f5eee2c46c80c20b2cdf4d391980d35a4623b7394f2c296f2f71afafa9e63ffbd3d6e4086dd7d0fc676dec86a3ab72530269c10b9258395e646767ff5eb97ec07f9c52d6417fafe4192d59a62a3167a74c31e35fbda42a014179784ff3c586be70fa529c85ca4b6c1a9036cd686b0971fe6c75650c78b16c853e6932a5cc7a289936697176e7742f7acbfbe35958c2878b", 0x0, 0x3400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) write$P9_RLERRORu(r2, &(0x7f0000000180)=ANY=[@ANYRESHEX, @ANYRES32=r3], 0x10) write$9p(r2, &(0x7f00000002c0)="d51a83", 0x3) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0xf8, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000600)='./file0\x00', &(0x7f0000000240)=[0x9], 0x0, 0x0, 0x1, 0x1}}, 0x40) write$P9_RREAD(r2, &(0x7f0000000100)={0x3f, 0x75, 0x1, {0x34, "400d435fab4d609502b2934497090503f01b5f966a71dcd8bd00dade9817c821dd1aa2f3166d5a94715f927bcaf6429d16d2a319"}}, 0x3f) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r2, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) ioctl$SCSI_IOCTL_PROBE_HOST(r2, 0x5385, 0x0) ioctl$EVIOCGBITSND(r5, 0x40044591, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x52302, 0x0) r7 = syz_open_dev$hiddev(&(0x7f0000000040), 0xc5, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r7, 0xf501, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000001c40)=0x4) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r8, 0x40082102, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) 2.251387975s ago: executing program 1 (id=253): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = fcntl$getown(r0, 0x9) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=r2}, &(0x7f0000000080)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x1, @mcast1, 0x2}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0xc68d, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}, @IFLA_MTU={0x8, 0x4, 0xb2}]}, 0x40}}, 0x40800) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x800010, &(0x7f0000000140)={[{@norecovery}]}, 0xed, 0x47c, &(0x7f0000000640)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x8) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newsa={0x15c, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, {@in=@local, 0x1234, 0x6c}, @in=@remote, {0xffffffffffffefff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x3504, 0x2, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0xfffffffffffffffc, 0xd9, 0x4, 0x80000001}}]}, 0x15c}}, 0x0) syz_emit_ethernet(0x26, &(0x7f0000000200)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x6c, 0x0, @remote, @local}, "00001234"}}}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="280000006c0001002abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000000001202020008001c00", @ANYBLOB="36447bc44f5d6433f18588507fbc0befbb5dd185e5147f90474d117467b08e2e4667b6341ab57ed3f52cda3ca790bc87a5557d55cb7fbedb61646bfd3247caa9229c6ef7d90c57055ff8e5885344bcb79129297ab64e327f1e550a05a1353482718e64eb6040572e53108c8436d18f02c07563ddbb2e00dc856d402f0f0df89da78eff79a3d063216fee03b057ae8314d106d925935c50d6a2c21346fd9fe7758dd45f7f0addeee2fdfe76ea3eca47099e32810e7cd6199fc7e2320ccd9aab91e0606a66638f6f7c67676a8bc6d5943792ac3228cfe209dcc5b18b627345173aa97d722be43f5bf8c0f2a371e167c1c276f1e6010ee0fb6c3f2e87780945912a3c0c78a7026e5cf93a6204e32fb60c2fe2d2b4a7b8a8e5ef1b53535e45ce56868de243a525a841226796c4dec78340cd4384abf01b5e7e7ccabc691ea5b1badcaf2cb1ac3c80ca128cd250e06866c9668b9ba715d470ff"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x8000002) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r7 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x50, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4ae1, 0x8}, 0x400, 0x0, 0x0, 0x9, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0xa2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x51, 0x0, 0x0, 0x0, 0x6e5, 0x8}, 0x0, 0xffffffffffffffff, r7, 0x8) r8 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$set_timeout(0xf, r8, 0x2) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r9, 0x29, 0x1a, &(0x7f0000000100)=0x8001, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)}, &(0x7f0000000500)=0x10) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x200, 0x3, 0x8, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0xfffffffffffffffe, 0x100, 0x0, 0x0, 0x80009, 0x40000000000000, 0x0, 0xfffffffffffffffd, 0x1, 0x0, 0x3, 0x2, 0x0, 0x1, 0x0, 0x7, 0x1}) 2.149707407s ago: executing program 3 (id=255): unshare(0x22020600) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') openat(r2, &(0x7f0000000c00)='auth.unix.ip/channel\x00', 0x2, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0x520, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x4000000000000000, 0x2668}, 0x10eccc, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000002, 0x4010, r3, 0x80000000) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x810) unshare(0x22020600) r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) splice(r4, &(0x7f0000000040)=0x10, r5, 0x0, 0x807, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.134655798s ago: executing program 0 (id=256): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x100000001}, 0x0, 0x0, 0x0, 0x5, 0x2, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x33) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x7, &(0x7f00000001c0)=0xffffdde4, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$can_raw(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, r2}, 0x10, &(0x7f00000005c0)={&(0x7f0000000200)=@canfd={{0x0, 0x1, 0x1}, 0x43, 0x1, 0x0, 0x0, "075ba1670da75ca31736b1c3170c99d9c0ab986287a7654c7c7b59efa7a78426a191442212e37214161d11a1bd8eb4f8f9250199c325082d8e2f557180550200"}, 0x48}, 0x1, 0x0, 0x0, 0x4002}, 0x1) r3 = io_uring_setup(0x650b, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x21, 0xab}) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000540)={r0, &(0x7f0000000300)="ed727c35219956251e48787cc936f929bb5fa4cd4b83a4ee148d22b8fd54eca7098ae8cb52544b09de330bfd0dc502de4121f2670df32ce77f92f61726890a84451f7574b7fa1d194742a6b55f15b8e5f47e24e87f2a6edc457f7d91a02793d96b1dd41cc13ca0ce79a2d5a6c322c23be20605e211226e2eaff3f16025e5e32d5c912609a22c599c7592cd585cd3c76fa8dc30af3229ff3e645fc25ba16d59199b3d42b8e04d00c504da0bab7f4eb4d970fc4aa3c7db465ec292b20b8357897805384f84d8e2ae7539d65ce09a92426b41df40aa90c88d5fe530e4", &(0x7f0000000400)=""/104}, 0x20) close(r4) r5 = socket(0x28, 0x5, 0x0) r6 = socket(0x10, 0x5, 0x0) r7 = socket(0x1e, 0x5, 0x0) connect$tipc(r7, &(0x7f0000000040)=@id={0x1e, 0x3, 0x3, {0x4e22, 0x3}}, 0x10) recvmmsg(r7, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000480)=""/184, 0xb8}], 0x1, &(0x7f0000000240)=""/105, 0x69}, 0xffeffff8}], 0x1, 0x20b0, 0x0) sendmmsg$inet(r7, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000000a00)}}, {{&(0x7f00000002c0)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000002d40)=[{&(0x7f0000000900)="de66f038da2c79a970b0ce5f775054d9b3ab00272dd8c9c2abe5b84275da874359bb5f20216ac0bf0db988db5764863873a2fae469c9d94281ce0a781d25310716bb20b7a01b700b418e3cd52664fd2c5c8810e1c766951a909a9c4b6212acdbf31b0e3bca2c53afbd007052ffa18ff754dff0536c5b9601aa190058ac72e530de9cbf6a3dd6f57db52bcd60117e65661709760edfeeb9039b656ce8c1b0", 0x9e}, {&(0x7f0000000700)="7cd09fefe5afc751eb1d050e6522acd0662b463be1e7350048f0cd9a85bf264697de0753ce567eaa99cbf397a1c73d7d763bc78beab92b34f0225d52631df7d88d48d493d97f4d8ae4cc781b6c9d7b4b17c793a9694e2c9ee6e6484cb0a3b307de65f3f4080e4acc357033fd96a74b61c9a7ae6731e019a72c49648b564caf01090b9df2d181b4ee424a146182e18d87", 0x90}, {&(0x7f0000000800)="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", 0xfd}], 0x3, &(0x7f0000002d80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x80000000}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6c4}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_ttl={{0x14}}], 0x80}}, {{&(0x7f0000002e80)={0x2, 0x4e24, @broadcast}, 0x10, 0x0}}], 0x3, 0x4044810) bind$vsock_stream(r6, &(0x7f0000000580)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(r6, 0x0, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f00000007c0)={0x0, 0x4d37}, 0x8) r8 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20) r9 = socket$igmp(0x2, 0x3, 0x2) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000a40)=ANY=[@ANYBLOB="090000000000000041010000000000000100000000000000", @ANYRES32=r9, @ANYBLOB="0000000003000000000000000000000000000000000000000000000048569c5a1cc93211f73204f6e76589bb558ec9584f2c246a51ff2f0eb0409aef648bca4aead80a25f4e59a6bd5daaa1b5bd9b0e04b2612e37a34d64f4785353f2aeb62e0ca890a91130c30474dc563b5d8d3d196e22e1d095d564ac8424c3a9c9cc5393e"]) recvfrom$inet_nvme(r5, 0x0, 0x0, 0x40000002, 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r8, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000140)=0xc) close_range(r3, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) 1.901593473s ago: executing program 4 (id=258): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaabb72b4000000590806000108"], 0x0) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x1d68, 0x0, 0x0, 0x7f1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x48098, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0_to_team\x00'}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x17f, 0x2000000101}, 0x114b8, 0x7ffffffc, 0x0, 0x9, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, 0x0) preadv(r2, 0x0, 0x0, 0x200000, 0x9) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000380)={0x0, 0x400}, &(0x7f00000003c0)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000640)={r3, @in={{0x2, 0x4e23, @multicast1}}, [0x4, 0x0, 0x7, 0x9, 0x8, 0x1, 0xffffffffffffffff, 0xa2a0, 0x9, 0x5, 0xfffffffffffffff8, 0x10001, 0x400, 0x8000000000000001]}, &(0x7f0000000740)=0x100) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r4, 0x29, 0xc8, &(0x7f0000000040), 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0x5, 0x2}, {0x1, 0xe}}}, 0x24}}, 0x0) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto$packet(r1, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0x48, 0x0, 0x0, 0x0) unshare(0x6020400) socket$can_j1939(0x1d, 0x2, 0x7) 1.900592404s ago: executing program 0 (id=259): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000800)='./file1\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRESOCT=0x0], 0x1, 0x32b, &(0x7f0000000840)="$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") mkdirat(0xffffffffffffff9c, 0x0, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) 1.881484744s ago: executing program 0 (id=260): perf_event_open(&(0x7f00000005c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0x42795000) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/netlink\x00') pread64(r0, &(0x7f0000002240)=""/236, 0xec, 0x4eb) socket$nl_route(0x10, 0x3, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000f80), 0x2010c00, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x80, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x10ecc8, 0x1224, 0x88, 0x5, 0x7, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x8) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x40, 0x25dfdbff, {0xa, 0x3f, 0x9, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_CACHEINFO={0x14, 0x6, {0x40000000, 0xfffff001, 0x6}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0xb, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xcb7, 0x0, 0x0, 0x0, 0x3}, [@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa0}}]}, &(0x7f00000003c0)='syzkaller\x00', 0x7fff, 0x0, 0x0, 0x41100, 0x8, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x6, 0x1}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000440)=[{0x2, 0x2, 0x4, 0x1}, {0x5, 0x1, 0x2, 0x7}, {0x0, 0x5, 0x6, 0xb}, {0x0, 0x3, 0x6, 0x3}], 0x10, 0x228a5f99}, 0x94) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r5, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x4) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000640)={0x89, @private=0xa010102, 0x4e21, 0x4, 'ovf\x00', 0x1, 0x3, 0x46}, 0x2c) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7) getsockname$packet(r7, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000100000000000000000000085000000b300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@delchain={0x3c, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r8, {}, {0xfff2, 0xffff}, {0xffff, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) r9 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r9, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="a0002883781ecc0e", 0x8}], 0x1}}], 0x1, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0) 1.613465911s ago: executing program 3 (id=261): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x6c50, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x10000008, 0x11b}) openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) bind(0xffffffffffffffff, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) (fail_nth: 3) 1.511194633s ago: executing program 2 (id=262): socket$kcm(0x1e, 0x5, 0x0) unshare(0x22020600) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'virt_wifi0\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x4, 0xfe, 0x1000, 0x9, 0x3, 0x3, 0x6, 0xfffffffa, 0x5d, 0xa, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x763, 0xfffffffc, 0x1, 0xe, 0x2b12, 0x1100, 0x6, 0x1c00, 0xb, 0x40, 0x80, 0x1, 0x3, 0xffffad37, 0x0, 0x11000, 0x8, 0x7, 0x79b, 0x2, 0x5, 0x7f, 0x7, 0xa, 0xefaf, 0xf, 0x102, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x9, 0x7, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x3, 0x400, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0x8, 0x6, 0x6, 0x9, 0x80000002, 0xfdffffff, 0x10002, 0xfffffffe, 0x80, 0x100, 0x5, 0xc, 0x81, 0xb, 0x5, 0x20006, 0x7, 0x2, 0xb, 0x4, 0xd9a, 0xd, 0x2a2, 0x0, 0x3, 0x2, 0x5, 0x8, 0x3, 0x4, 0x2, 0x80003b, 0x2, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x3, 0x5, 0xc59, 0xffffffff]}}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1.510799123s ago: executing program 2 (id=263): r0 = add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$unlink(0x9, r0, r0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0xa, 0x0, 0x268c, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x7, @perf_config_ext={0x0, 0x3}, 0x100080, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000000f40)=""/4079, 0x6f, 0xfef, 0x8}, 0x28) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x2, 0x5b6}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdir(&(0x7f0000000000)='./my_config\x00', 0x1ff) mmap$xdp(&(0x7f0000a54000/0x2000)=nil, 0x2000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x1ff) prctl$PR_SET_MM_MAP(0x3f, 0xe, 0x0, 0x0) r2 = openat(0xffffff9c, 0x0, 0x1, 0x0) write(r2, &(0x7f0000000700)='0', 0x1) socket$packet(0x11, 0x2, 0x300) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7005}, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) socket$netlink(0x10, 0x3, 0x4) waitid(0x2, 0x0, 0x0, 0x2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x2000b, 0x1000005, 0x401d031, 0xffffffffffffffff, 0x0) unshare(0x20000) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') setns(r4, 0x20000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)={0x3c, r1, 0x1, 0x70bd29, 0x0, {0x54}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0x3c}}, 0x4c004) mq_open(&(0x7f00000013c0)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLN~\x96\x1bZ\xfe\nTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5\x00\x02\x00\x00\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x92\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x82\x95\xc9\xf3uw\x00\x00\x00\x00\x00\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec\x00\x00\x00\x00\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00\xac8t\xc5\xd7Q\x92\xb1\xeex@\xe4\xcc\xfe\x98\xf63\xde\xcd\x1841\x93\xe5\xb7D\xd49\"\f<\x8d\xa5m\x883\xcf\xc7\xe5Y\xb6H\xa4\xc4_Q|\v\x06:\xdap48T\xa6\xcb:+\x7f\x9771fK=\xc2)\xa60\x1d>\xd2\xe8\xc0\x03', 0x42, 0x148, 0x0) 1.487810934s ago: executing program 3 (id=264): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) r1 = syz_open_pts(r0, 0x200) r2 = dup3(r1, r0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)={0x1b, 0x0, 0x0, 0x800, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, r2, 0x5, 0x5, 0x4}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x6, 0x13, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000780)='syzkaller\x00', 0x8, 0x73, &(0x7f00000007c0)=""/115, 0x41000, 0x9, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000000840)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000880)={0x3, 0x0, 0x80, 0x8}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f00000008c0)=[{0x1, 0x1, 0xc, 0x3}, {0x2, 0x4, 0x8, 0xc}, {0x1, 0x1, 0x10, 0x5}], 0x10, 0x1}, 0x94) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000140)=0x12) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c840) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r5, &(0x7f0000002f00)=[{{&(0x7f0000000180)={0xa, 0x4e23, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, 0x55}, 0x1c, &(0x7f0000002b80)=[{&(0x7f00000001c0)='!', 0x1}], 0x1}}], 0x1, 0x10004040) sendmmsg$inet6(r5, &(0x7f0000002d00)=[{{&(0x7f0000001800)={0xa, 0x4e22, 0x1, @private2, 0xfffe}, 0x1c, &(0x7f00000010c0)=[{&(0x7f00000011c0)="e6", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r5, 0x1) getsockopt$inet_sctp6_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f0000000080), &(0x7f00000000c0)=0x4) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="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", 0xffe3, 0x6000000000000000, 0x0, 0x0) 1.314718688s ago: executing program 1 (id=265): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x5, 0x1}, 0xc800, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xdc101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xd6, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xc}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x101000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x40}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 1.199631751s ago: executing program 2 (id=266): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="9402000021000100fcffffff00000000ac1414aae5fffff8b49ed9825133a900fc0100000000000000070000000000000000add500200000000000801aeaae", @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="0000000000000000700004e6706362632874776f666973682900000000000000000000000480000000000000000000000000000000000000000000000000000000000000000000000000000040010000dc06216ef2c68e9f6da05d886dbc3273ef99796b36698e2bd5179c3eea5474fc78c9720bfc4f90a708001f0001000000cc0111"], 0x294}, 0x1, 0x0, 0x0, 0x24000890}, 0x4000) 1.174705551s ago: executing program 0 (id=267): r0 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1800040, &(0x7f0000000780)={[{@barrier}, {@nodioread_nolock}, {@nobarrier}, {@barrier}, {@block_validity}, {@nodioread_nolock}, {@nodelalloc}, {@resuid}, {@init_itable_val={'init_itable', 0x3d, 0x6}}]}, 0x1, 0x59c, &(0x7f0000001840)="$eJzs3U9oHGUbAPBnZrNN/+T70g++Dz6lh6JChdJN0j9aPbVXsVDoQfCiYbMNJZtsySbahIDpvYg9iEov9aYHj4oHD+LFo1cvimeh2KDQ9KArm51N03S3bmI2W7O/H0z2fWdm93nfmX3e7AwzTAB962j9TxrxVERcTCKGNywbiGzh0cZ6qytLxfsrS8UkarVLvySRRMS9laVic/0kez0UEcsR8f+I+CYfcTxd/8h9zUJ1YXFqvFwuzWb1kbnpqyPVhcUTV6bHJ0uTpZlTL7505uzpM2MnxzY2935tYy2/tb7e+PHmuze+e+X2zU8/O7JcfH88iXMxlC3b2I+d1Ngm+Ti3af7pbgTroaTXDWBbclme11PpfzEcuSzrW6ltHBwGd6V5QBfVBiNq6zYUgT6QSHroU83fAfXj3+a0m78/7pxvHIDU466uLBXfiWb8gca5idi/dmxy8NfkoSOT+vHm4d1sKHvS8vWIGB0YePT7n2Tfv+0b3YkG0lVfn2/sqEf3f7o+/kSL8Weoee70b2qOf6vZ+LfaIn6uzfh3scMYv7/+00dt418fjKdbxk/W4yct4qcR8WaH8W+99uXZdstqH0cci9bxm5LHnx8euXylXBpt/G0Z46tjR15u3/+Ig23iN87Z7l9ryMb+78valHbY/y++/fyZ5cfEf/7Zx+//Vtv/QES812H8/9z75NV2y+5cT+7WfwVsdf8nkY/bHcZ/4dzRH7Kis4YAAAAAAAAAALCD0rVr2ZK0sF5O00KhcQ/vf+NgWq5U545frszPTDSueTsc+bR5pdVwo57U62PZ9bjN+slN9VO5LGDuwFq9UKyUJ3rcdwAAAAAAAAAAAAAAAAAAAHhSHNp0//9vubX7/zc/rhrYq9o/8hvY6+Q/9K+H8z/pWTuA3ef/P/StmvyH/iX/oX/Jf+hf8h/6l/yH/iX/oX/JfwAAAAAAAAAAAAAAAAAAAAAAAAAA6IqLFy7Up9r9laVivT4xsDA/VXnrxESpOlWYni8WipXZq4XJSmWyXCoUK9N/9XlJpXJ1NGbmr43MlapzI9WFxTemK/MzzWeKlvJd7xEAAAAAAAAAAAAAAAAAAAD88wytTUlaiMg36mlaKET8KyIOJ5FcvlIujUbEvyPi+1x+sF4f63WjAQAAAAAAAAAAAAAAAAAAYI+pLixOjZfLpdnuFQayUF0M0XlhYCsrR8Tyzjaj/olbflc+24A93nR7o5B7Mr6HT36hh4MSAAAAAAAAAAAAAAAAAAD0qQc3/Xb6jj+62yAAAAAAAAAAAAAAAAAAAADoS+nPSUTUp2PDzw1tXrovWc2tvUbE27cufXBtfG5udqw+/+76/LkPs/kne9F+oFPNPE0jop7HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwAPVhcWp8XK5NLvNwmAH6/S6jwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADb8WcAAAD//y4WzlE=") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x1c3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) write$P9_RRENAME(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4012011, r1, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)) 1.166233431s ago: executing program 4 (id=268): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000100)=""/24, 0x18}, {0x0, 0x63}], 0x2, 0x0, 0x20) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000940)) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000040)={0xd4c, 0xffff, 0x5, 0x1fe, 0xfd, "30d70800", 0xdb9, 0x1fd}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000140)=0x8) accept4(r1, 0x0, &(0x7f0000000300), 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x48000) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="e8c79b08", @ANYRES8=r4, @ANYBLOB="010000000000000000000700000024000180060005004e230000060001000200051b08000300ac1414aa"], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0xc0) 1.125110312s ago: executing program 2 (id=269): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x7, 0xfffffffffffff148}, 0x0, 0x35, 0x6, 0x3, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route_sched(r1, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x25dfdbfe, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404}], [@TCA_POLICE_RATE={0x404}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x6c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xfffffff7, 0x0, 0xed, 0x6}}]}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x810}, 0x0) sendto$packet(r0, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c288a8", 0xe, 0x6f4fef9cab2ede47, &(0x7f0000000440)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x14) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) epoll_create1(0x80000) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000001800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x4, 0x1006, &(0x7f0000002080)=""/4102, 0x41000}, 0x94) 1.049327224s ago: executing program 4 (id=270): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000800)='./file1\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRESOCT=0x0], 0x1, 0x32b, &(0x7f0000000840)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x18) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) 1.048323974s ago: executing program 1 (id=271): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_open_dev$tty20(0xc, 0x4, 0x0) 825.1114ms ago: executing program 0 (id=272): unshare(0x22020600) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') openat(r2, &(0x7f0000000c00)='auth.unix.ip/channel\x00', 0x2, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0x520, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x4000000000000000, 0x2668}, 0x10eccc, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000002, 0x4010, r3, 0x80000000) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x810) unshare(0x22020600) r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) splice(r4, &(0x7f0000000040)=0x10, r5, 0x0, 0x807, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 819.740159ms ago: executing program 3 (id=273): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) (async) syz_emit_ethernet(0x56, &(0x7f0000000000)={@remote, @broadcast, @void, {@canfd={0xd, {{0x3, 0x0, 0x0, 0x1}, 0x38, 0x1, 0x0, 0x0, "d1feb4586a3735d948b3e8afb63ec4a333923147a3ab66d878d3e8d90442b701912d43d8124098878d7a864f61a984e67f7cfdf5fbdccb5e9b07208ac2dcb214"}}}}, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) recvmsg(r0, &(0x7f0000002700)={0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f00000015c0)=""/4096, 0x1000}], 0x1}, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x4000) 777.055471ms ago: executing program 4 (id=274): socket$tipc(0x1e, 0x2, 0x0) unshare(0x22020600) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'virt_wifi0\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x4, 0xfe, 0x1000, 0x9, 0x3, 0x3, 0x6, 0xfffffffa, 0x5d, 0xa, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x763, 0xfffffffc, 0x1, 0xe, 0x2b12, 0x1100, 0x6, 0x1c00, 0xb, 0x40, 0x80, 0x1, 0x3, 0xffffad37, 0x0, 0x11000, 0x8, 0x7, 0x79b, 0x2, 0x5, 0x7f, 0x7, 0xa, 0xefaf, 0xf, 0x102, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x9, 0x7, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x3, 0x400, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0x8, 0x6, 0x6, 0x9, 0x80000002, 0xfdffffff, 0x10002, 0xfffffffe, 0x80, 0x100, 0x5, 0xc, 0x81, 0xb, 0x5, 0x20006, 0x7, 0x2, 0xb, 0x4, 0xd9a, 0xd, 0x2a2, 0x0, 0x3, 0x2, 0x5, 0x8, 0x3, 0x4, 0x2, 0x80003b, 0x2, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x3, 0x5, 0xc59, 0xffffffff]}}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 772.252801ms ago: executing program 1 (id=275): stat(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f00000004c0)={[{@nodioread_nolock}, {@noblock_validity}, {@test_dummy_encryption}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@nodiscard}, {@stripe={'stripe', 0x3d, 0x4}}, {@quota}], [{@measure}, {@euid_eq={'euid', 0x3d, r0}}, {@seclabel}]}, 0x4, 0x61f, &(0x7f0000001140)="$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") r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) write$binfmt_register(r1, &(0x7f00000001c0)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x19, 0x3a, '\\*', 0x3a, '-', 0x3a, './file0', 0x3a, [0x4f, 0x50, 0x43]}, 0x2d) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000049c0)={0x3, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1001}, [@call={0x85, 0x0, 0x0, 0x16}]}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r2 = socket$unix(0x1, 0x2, 0x0) symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') bind$unix(r2, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) 624.277005ms ago: executing program 4 (id=276): socket$inet6_mptcp(0xa, 0x1, 0x106) syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x10b301) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000100), 0x10) sendmsg$can_bcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="0500000008000000ed00000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="03"], 0x48}, 0x1, 0x0, 0x0, 0x2000c014}, 0x800) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x200008c1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1d, r1, 0x0, 0xe00}, 0x10, &(0x7f0000000180)={&(0x7f0000001140)=ANY=[@ANYRES64=r0], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8001) 623.777485ms ago: executing program 1 (id=277): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, &(0x7f0000000380)="dd20e19538bb72e3851c15a48af81cb5855b075ec1963fcffe64a69344071da78ab0a8c75af6c0f6080ffbb3f857a6796af7c18feeaddfba6ebcf47e46583c81f823924983ddfe62d7165a630e44cc0d26b9ecf26a2979ede835ab0d82975c6eaedc12b2df8c57b7cb42d5d56f93985d7267d5d5e5207aa06deba0b00102535244bb79907cef6b09535230b5fd75a6998164098923bf9bc32f2284df93fd2e43dae92333eac042897c8aec28cbc2396d1607c62c95b14d935f96092b7c77f0a2b49e7ab3c3ec69a2b31938a6544e31", 0xcf, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x30120808) (async) keyctl$setperm(0x5, r0, 0x30120808) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000007c0), 0xfe, 0x526, &(0x7f0000001100)="$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") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') (async) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0x1, 0x7ffffd, 0x0, {}, [{0x4c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xffffffff, 0x10000, 0x8, 0x7, 0xfffffffc}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4804}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0x1, 0x7ffffd, 0x0, {}, [{0x4c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xffffffff, 0x10000, 0x8, 0x7, 0xfffffffc}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4804}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040), 0x10}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040), 0x10}, 0x94) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x0) connect$unix(r1, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x4c840) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0x0, 0xfff2}, {0x9, 0xfff2}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xfff2}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041044}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0x0, 0xfff2}, {0x9, 0xfff2}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xfff2}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041044}, 0x0) socket(0x80000000000000a, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) (async) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) fchdir(r6) r7 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1040, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x40) write(r9, &(0x7f0000004200)='t', 0x1) sendfile(r9, r8, 0x0, 0x7fffffff) (async) sendfile(r9, r8, 0x0, 0x7fffffff) ftruncate(r7, 0x2007ffb) sendfile(r7, r7, 0x0, 0x1000000201005) socket$inet_udp(0x2, 0x2, 0x0) (async) r10 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r10, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) (async) connect$inet(r10, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) 17.428159ms ago: executing program 4 (id=278): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaabb72b4000000590806000108"], 0x0) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x1d68, 0x0, 0x0, 0x7f1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x48098, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0_to_team\x00'}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x17f, 0x2000000101}, 0x114b8, 0x7ffffffc, 0x0, 0x9, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, 0x0) preadv(r2, 0x0, 0x0, 0x200000, 0x9) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000380)={0x0, 0x400}, &(0x7f00000003c0)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000640)={r3, @in={{0x2, 0x4e23, @multicast1}}, [0x4, 0x0, 0x7, 0x9, 0x8, 0x1, 0xffffffffffffffff, 0xa2a0, 0x9, 0x5, 0xfffffffffffffff8, 0x10001, 0x400, 0x8000000000000001]}, &(0x7f0000000740)=0x100) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r4, 0x29, 0xc8, &(0x7f0000000040), 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0x5, 0x2}, {0x1, 0xe}}}, 0x24}}, 0x0) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto$packet(r1, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0x48, 0x0, 0x0, 0x0) unshare(0x6020400) socket$can_j1939(0x1d, 0x2, 0x7) 0s ago: executing program 0 (id=279): unshare(0x22020600) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') openat(r2, &(0x7f0000000c00)='auth.unix.ip/channel\x00', 0x2, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0x520, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x4000000000000000, 0x2668}, 0x10eccc, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000002, 0x4010, r3, 0x80000000) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x810) unshare(0x22020600) r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) splice(r4, &(0x7f0000000040)=0x10, r5, 0x0, 0x807, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x32, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0xf}}, {0x4e20, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x3, "9c25a81de3a2211c1c9e8d76fbc4353c3b368740cab8865b", "aff658c7f4edb9e8038258239716d9af58fdbf6a7e584c67e41c7c4be4c51180"}}}}}}, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) kernel console output (not intermixed with test programs): [ 20.821492][ T29] audit: type=1400 audit(1788245963.403:112): avc: denied { write } for pid=3254 comm="sh" path="pipe:[377]" dev="pipefs" ino=377 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 20.821516][ T29] audit: type=1400 audit(1788245963.403:113): avc: denied { rlimitinh } for pid=3254 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 20.821537][ T29] audit: type=1400 audit(1788245963.403:114): avc: denied { siginh } for pid=3254 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 20.875101][ T3251] sshd-session (3251) used greatest stack depth: 11256 bytes left [ 20.937059][ T29] audit: type=1400 audit(1788245963.523:115): avc: denied { search } for pid=3257 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 20.937103][ T29] audit: type=1400 audit(1788245963.523:116): avc: denied { search } for pid=3257 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 20.937130][ T29] audit: type=1400 audit(1788245963.523:117): avc: denied { search } for pid=3257 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 20.937151][ T29] audit: type=1400 audit(1788245963.523:118): avc: denied { search } for pid=3257 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 20.959341][ T29] audit: type=1400 audit(1788245963.523:119): avc: denied { read } for pid=3258 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 21.467783][ T3277] scp (3277) used greatest stack depth: 11216 bytes left Warning: Permanently added '10.128.0.223' (ED25519) to the list of known hosts. [ 28.407812][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 28.407849][ T29] audit: type=1400 audit(1788245970.993:126): avc: denied { mounton } for pid=3286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 28.414128][ T29] audit: type=1400 audit(1788245971.013:127): avc: denied { mount } for pid=3286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.414642][ T3286] cgroup: Unknown subsys name 'net' [ 28.414869][ T29] audit: type=1400 audit(1788245971.013:128): avc: denied { unmount } for pid=3286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.581137][ T3286] cgroup: Unknown subsys name 'cpuset' [ 28.587174][ T3286] cgroup: Unknown subsys name 'rlimit' [ 28.706596][ T29] audit: type=1400 audit(1788245971.293:129): avc: denied { setattr } for pid=3286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.730633][ T29] audit: type=1400 audit(1788245971.293:130): avc: denied { create } for pid=3286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.730668][ T29] audit: type=1400 audit(1788245971.293:131): avc: denied { write } for pid=3286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.730686][ T29] audit: type=1400 audit(1788245971.293:132): avc: denied { read } for pid=3286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 28.751481][ T29] audit: type=1400 audit(1788245971.323:133): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 28.795041][ T3288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 28.795880][ T29] audit: type=1400 audit(1788245971.393:134): avc: denied { relabelto } for pid=3288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.795916][ T29] audit: type=1400 audit(1788245971.393:135): avc: denied { write } for pid=3288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.820956][ T3286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 30.197420][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.197506][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.197563][ T3303] bridge_slave_0: entered allmulticast mode [ 30.198207][ T3303] bridge_slave_0: entered promiscuous mode [ 30.232350][ T3296] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.232397][ T3296] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.232491][ T3296] bridge_slave_0: entered allmulticast mode [ 30.232926][ T3296] bridge_slave_0: entered promiscuous mode [ 30.233726][ T3296] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.233753][ T3296] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.233859][ T3296] bridge_slave_1: entered allmulticast mode [ 30.234303][ T3296] bridge_slave_1: entered promiscuous mode [ 30.247645][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.247673][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.247803][ T3303] bridge_slave_1: entered allmulticast mode [ 30.248331][ T3303] bridge_slave_1: entered promiscuous mode [ 30.260781][ T3296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.283267][ T3296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.293547][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.312025][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.316566][ T3299] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.316598][ T3299] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.316647][ T3299] bridge_slave_0: entered allmulticast mode [ 30.317250][ T3299] bridge_slave_0: entered promiscuous mode [ 30.322630][ T3299] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.322657][ T3299] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.322738][ T3299] bridge_slave_1: entered allmulticast mode [ 30.330766][ T3299] bridge_slave_1: entered promiscuous mode [ 30.364136][ T3303] team0: Port device team_slave_0 added [ 30.364931][ T3296] team0: Port device team_slave_0 added [ 30.366092][ T3296] team0: Port device team_slave_1 added [ 30.366148][ T3295] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.366176][ T3295] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.366239][ T3295] bridge_slave_0: entered allmulticast mode [ 30.366791][ T3295] bridge_slave_0: entered promiscuous mode [ 30.377722][ T3303] team0: Port device team_slave_1 added [ 30.383453][ T3295] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.383484][ T3295] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.383538][ T3295] bridge_slave_1: entered allmulticast mode [ 30.384032][ T3295] bridge_slave_1: entered promiscuous mode [ 30.394796][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.394827][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.394891][ T3300] bridge_slave_0: entered allmulticast mode [ 30.395374][ T3300] bridge_slave_0: entered promiscuous mode [ 30.406734][ T3299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.406829][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.406858][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.407024][ T3300] bridge_slave_1: entered allmulticast mode [ 30.407562][ T3300] bridge_slave_1: entered promiscuous mode [ 30.413545][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.413567][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.413590][ T3296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.414157][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.414168][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.414237][ T3296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.418153][ T3299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.428936][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.428950][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.428973][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.440660][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.440674][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.440698][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.441816][ T3295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.442855][ T3295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.458448][ T3300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.459527][ T3300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.464192][ T3299] team0: Port device team_slave_0 added [ 30.465417][ T3299] team0: Port device team_slave_1 added [ 30.496883][ T3296] hsr_slave_0: entered promiscuous mode [ 30.497238][ T3296] hsr_slave_1: entered promiscuous mode [ 30.509854][ T3300] team0: Port device team_slave_0 added [ 30.510714][ T3295] team0: Port device team_slave_0 added [ 30.511834][ T3295] team0: Port device team_slave_1 added [ 30.512147][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.512158][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.512182][ T3299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.512685][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.512770][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.512806][ T3299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.531793][ T3300] team0: Port device team_slave_1 added [ 30.541867][ T3295] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.541881][ T3295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.541974][ T3295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.549571][ T3303] hsr_slave_0: entered promiscuous mode [ 30.549972][ T3303] hsr_slave_1: entered promiscuous mode [ 30.550392][ T3303] debugfs: 'hsr0' already exists in 'hsr' [ 30.550406][ T3303] Cannot create hsr debugfs directory [ 30.551115][ T3295] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.551127][ T3295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.551153][ T3295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.556285][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.556296][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.556380][ T3300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.568484][ T3299] hsr_slave_0: entered promiscuous mode [ 30.568966][ T3299] hsr_slave_1: entered promiscuous mode [ 30.569233][ T3299] debugfs: 'hsr0' already exists in 'hsr' [ 30.569246][ T3299] Cannot create hsr debugfs directory [ 30.569515][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.569525][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.569597][ T3300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.629198][ T3300] hsr_slave_0: entered promiscuous mode [ 30.629669][ T3300] hsr_slave_1: entered promiscuous mode [ 30.629981][ T3300] debugfs: 'hsr0' already exists in 'hsr' [ 30.629994][ T3300] Cannot create hsr debugfs directory [ 30.657424][ T3295] hsr_slave_0: entered promiscuous mode [ 30.657791][ T3295] hsr_slave_1: entered promiscuous mode [ 30.658136][ T3295] debugfs: 'hsr0' already exists in 'hsr' [ 30.658149][ T3295] Cannot create hsr debugfs directory [ 30.869000][ T3303] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.889003][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.891153][ T3303] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.899708][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.911218][ T3303] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.938999][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.945607][ T3303] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.949557][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.970801][ T3296] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.979635][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.980364][ T3296] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.005921][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.018335][ T3296] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.024238][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.024802][ T3296] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.049940][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.058364][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.058398][ T3303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.058548][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.058653][ T3303] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.064374][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.069927][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.290710][ T3299] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.301674][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.302247][ T3299] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.308480][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.329763][ T3299] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.338510][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.346952][ T3295] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.353126][ T3295] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.362536][ T3299] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.367933][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.374285][ T3295] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.382851][ T3295] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.401287][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.404009][ T3295] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.410148][ T3295] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.427198][ T3295] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.431425][ T3295] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.453641][ T3300] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.462267][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.473123][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.482179][ T3300] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.490665][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.500543][ T3300] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.509207][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.511209][ T3300] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.518180][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.536803][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.536839][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.539346][ T123] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.539378][ T123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.564868][ T3296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.601611][ T3295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.602806][ T3296] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.604694][ T3299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.609979][ T3303] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.621205][ T3299] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.625741][ T3295] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.635104][ T3296] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.635126][ T3296] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.659532][ T3299] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.659554][ T3299] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.693387][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.693431][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.696407][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.696442][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.714679][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.714714][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.717675][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.717704][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.719392][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.719420][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.723322][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.723396][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.846714][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.863046][ T3300] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.874634][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.874681][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.882758][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.882815][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.914867][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.974952][ T3299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.039654][ T3296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.085431][ T3295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.144962][ T3299] veth0_vlan: entered promiscuous mode [ 32.150166][ T3299] veth1_vlan: entered promiscuous mode [ 32.173838][ T3299] veth0_macvtap: entered promiscuous mode [ 32.177614][ T3299] veth1_macvtap: entered promiscuous mode [ 32.193615][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.199037][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.229045][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.247317][ T3296] veth0_vlan: entered promiscuous mode [ 32.264125][ T3296] veth1_vlan: entered promiscuous mode [ 32.277100][ T3303] veth0_vlan: entered promiscuous mode [ 32.291016][ T3299] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.292664][ T3295] veth0_vlan: entered promiscuous mode [ 32.292982][ T31] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.293082][ T31] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.293137][ T31] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.293339][ T31] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.298951][ T3295] veth1_vlan: entered promiscuous mode [ 32.305101][ T3303] veth1_vlan: entered promiscuous mode [ 32.322396][ T3296] veth0_macvtap: entered promiscuous mode [ 32.328273][ T3296] veth1_macvtap: entered promiscuous mode [ 32.355584][ T3295] veth0_macvtap: entered promiscuous mode [ 32.358630][ T3303] veth0_macvtap: entered promiscuous mode [ 32.364011][ T3303] veth1_macvtap: entered promiscuous mode [ 32.368257][ T3295] veth1_macvtap: entered promiscuous mode [ 32.386161][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.394843][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.412286][ T3295] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.423913][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.433937][ T3295] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.445005][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.551364][ T3300] veth0_vlan: entered promiscuous mode [ 32.556807][ T3300] veth1_vlan: entered promiscuous mode [ 32.571695][ T51] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.571864][ T3435] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.611055][ T51] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.611225][ T51] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.611312][ T51] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.611449][ T51] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.611484][ T51] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.611530][ T51] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.611563][ T51] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.611649][ T51] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.611682][ T51] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.611740][ T51] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.613273][ T3300] veth0_macvtap: entered promiscuous mode [ 32.620133][ T3300] veth1_macvtap: entered promiscuous mode [ 32.641686][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.655201][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.680697][ T358] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.680809][ T358] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.680885][ T358] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.680920][ T358] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.834530][ T3509] pim6reg: entered allmulticast mode [ 32.859420][ T3509] pim6reg: left allmulticast mode [ 32.938454][ T3511] syz.4.5 (3511) used greatest stack depth: 11136 bytes left [ 32.986148][ T3509] syz.2.3 (3509) used greatest stack depth: 11064 bytes left [ 33.049824][ T3531] tipc: Started in network mode [ 33.049892][ T3531] tipc: Node identity 82041e9f402e, cluster identity 4711 [ 33.050022][ T3531] tipc: Enabled bearer , priority 0 [ 33.066865][ T3522] loop0: detected capacity change from 0 to 512 [ 33.093606][ T3531] syzkaller0: entered promiscuous mode [ 33.093638][ T3531] syzkaller0: entered allmulticast mode [ 33.098697][ T3522] EXT4-fs (loop0): fragment/cluster size (1024) != block size (2048) [ 33.101876][ T3531] tipc: Resetting bearer [ 33.176579][ T3531] tipc: Resetting bearer [ 33.191612][ T3531] tipc: Disabling bearer [ 33.237472][ T3540] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1'. [ 33.386131][ T3549] random: crng reseeded on system resumption [ 33.891002][ T3530] kexec: Could not allocate swap buffer [ 33.905947][ T29] kauditd_printk_skb: 67 callbacks suppressed [ 33.905970][ T29] audit: type=1400 audit(1788245976.493:203): avc: denied { unmount } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 34.079517][ T29] audit: type=1400 audit(1788245976.663:204): avc: denied { watch } for pid=3554 comm="syz.4.18" path="/5" dev="tmpfs" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 34.113188][ T29] audit: type=1400 audit(1788245976.703:205): avc: denied { watch_reads } for pid=3554 comm="syz.4.18" path="/5" dev="tmpfs" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 34.223282][ T29] audit: type=1400 audit(1788245976.813:206): avc: denied { ioctl } for pid=3559 comm="syz.0.21" path="socket:[5166]" dev="sockfs" ino=5166 ioctlcmd=0x6685 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 34.250976][ T29] audit: type=1400 audit(1788245976.813:207): avc: denied { connect } for pid=3559 comm="syz.0.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.251006][ T29] audit: type=1400 audit(1788245976.823:208): avc: denied { accept } for pid=3559 comm="syz.0.21" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 34.307605][ T3553] loop3: detected capacity change from 0 to 512 [ 34.345414][ T3553] EXT4-fs (loop3): fragment/cluster size (1024) != block size (2048) [ 34.359157][ T29] audit: type=1400 audit(1788245976.943:209): avc: denied { mount } for pid=3569 comm="syz.4.25" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 34.393236][ T29] audit: type=1400 audit(1788245976.983:210): avc: denied { append } for pid=3569 comm="syz.4.25" name="sda" dev="devtmpfs" ino=136 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 34.509042][ T3572] netlink: 48 bytes leftover after parsing attributes in process `syz.3.17'. [ 34.601567][ T29] audit: type=1400 audit(1788245977.193:211): avc: denied { unmount } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 34.633736][ T29] audit: type=1400 audit(1788245977.213:212): avc: denied { ioctl } for pid=3573 comm="syz.0.26" path="socket:[5206]" dev="sockfs" ino=5206 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.654097][ T3579] loop4: detected capacity change from 0 to 1024 [ 34.657904][ T3579] ======================================================= [ 34.657904][ T3579] WARNING: The mand mount option has been deprecated and [ 34.657904][ T3579] and is ignored by this kernel. Remove the mand [ 34.657904][ T3579] option from the mount to silence this warning. [ 34.657904][ T3579] ======================================================= [ 34.669917][ T3574] netlink: 68 bytes leftover after parsing attributes in process `syz.0.26'. [ 34.734177][ T3579] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 34.734375][ T3579] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.787365][ T3579] EXT4-fs error (device loop4): ext4_map_blocks:832: inode #15: comm syz.4.27: lblock 0 mapped to illegal pblock 0 (length 1) [ 34.790044][ T3579] EXT4-fs error (device loop4): ext4_map_blocks:790: inode #15: comm syz.4.27: lblock 0 mapped to illegal pblock 0 (length 1) [ 34.790270][ T3579] EXT4-fs error (device loop4): ext4_map_blocks:790: inode #15: comm syz.4.27: lblock 0 mapped to illegal pblock 0 (length 1) [ 34.790420][ T3579] EXT4-fs error (device loop4): ext4_map_blocks:790: inode #15: comm syz.4.27: lblock 0 mapped to illegal pblock 0 (length 1) [ 34.792833][ T3579] EXT4-fs error (device loop4): ext4_map_blocks:790: inode #15: comm syz.4.27: lblock 0 mapped to illegal pblock 0 (length 1) [ 34.793045][ T3579] EXT4-fs error (device loop4): ext4_map_blocks:790: inode #15: comm syz.4.27: lblock 0 mapped to illegal pblock 0 (length 1) [ 34.793176][ T3579] EXT4-fs error (device loop4): ext4_map_blocks:790: inode #15: comm syz.4.27: lblock 0 mapped to illegal pblock 0 (length 1) [ 34.793307][ T3579] EXT4-fs error (device loop4): ext4_map_blocks:790: inode #15: comm syz.4.27: lblock 0 mapped to illegal pblock 0 (length 1) [ 34.793424][ T3579] EXT4-fs error (device loop4): ext4_map_blocks:790: inode #15: comm syz.4.27: lblock 0 mapped to illegal pblock 0 (length 1) [ 34.793574][ T3579] EXT4-fs error (device loop4): ext4_map_blocks:790: inode #15: comm syz.4.27: lblock 0 mapped to illegal pblock 0 (length 1) [ 34.945447][ T3590] loop0: detected capacity change from 0 to 512 [ 34.955849][ T3590] EXT4-fs (loop0): invalid journal inode [ 34.955888][ T3590] EXT4-fs (loop0): can't get journal size [ 34.968584][ T3590] EXT4-fs (loop0): 1 truncate cleaned up [ 34.969023][ T3590] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.994633][ T3589] usb usb2: usbfs: process 3589 (syz.3.29) did not claim interface 0 before use [ 35.103573][ T3549] Unrecognized hibernate image header format! [ 35.103590][ T3549] PM: hibernation: Image mismatch: architecture specific data [ 35.106110][ T3549] hwrng_fill thread creation failed [ 35.120523][ T123] netdevsim netdevsim120 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.413688][ T3606] loop1: detected capacity change from 0 to 512 [ 35.476702][ T3606] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.477681][ T3606] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.609691][ T3587] syz.0.28 (3587) used greatest stack depth: 10880 bytes left [ 35.624250][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 35.647799][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.717070][ T3621] loop2: detected capacity change from 0 to 256 [ 35.744719][ T3621] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 35.744751][ T3621] FAT-fs (loop2): Filesystem has been set read-only [ 35.833000][ T3619] loop0: detected capacity change from 0 to 512 [ 35.838847][ T3627] loop4: detected capacity change from 0 to 164 [ 35.839874][ T3627] iso9660: Unknown parameter '@Ù' [ 35.849961][ T3629] random: crng reseeded on system resumption [ 35.871844][ T3619] EXT4-fs (loop0): fragment/cluster size (1024) != block size (2048) [ 36.028278][ T3606] syz.1.35 (3606) used greatest stack depth: 9920 bytes left [ 36.035127][ T3638] netlink: 60 bytes leftover after parsing attributes in process `syz.0.39'. [ 36.062261][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.175817][ T3647] netlink: 12 bytes leftover after parsing attributes in process `syz.3.48'. [ 36.223427][ T3647] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=3647 comm=syz.3.48 [ 36.391140][ T3657] loop3: detected capacity change from 0 to 2048 [ 36.403354][ T3657] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.424587][ T3658] tipc: Started in network mode [ 36.424627][ T3658] tipc: Node identity 7e421f1f25f5, cluster identity 4711 [ 36.424668][ T3658] tipc: Enabled bearer , priority 0 [ 36.427170][ T3658] syzkaller0: entered promiscuous mode [ 36.427189][ T3658] syzkaller0: entered allmulticast mode [ 36.486763][ T3648] loop1: detected capacity change from 0 to 512 [ 36.544265][ T3648] EXT4-fs: Ignoring removed oldalloc option [ 36.598743][ T3648] EXT4-fs error (device loop1): ext4_orphan_get:1429: comm syz.1.47: bad orphan inode 15 [ 36.598844][ T3648] loop1: lost filesystem error report for type 5 error -117 [ 36.599455][ T3648] ext4_test_bit(bit=14, block=5) = 0 [ 36.618368][ T3648] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.647715][ T3657] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 36.666609][ T3657] EXT4-fs (loop3): Remounting filesystem read-only [ 36.667199][ T3657] EXT4-fs (loop3): error restoring inline_data for inode -- potential data loss! (inode 15, error -30) [ 36.689194][ T3670] Zero length message leads to an empty skb [ 37.383437][ T3655] tipc: Resetting bearer [ 37.391510][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.401485][ T3655] tipc: Disabling bearer [ 37.411575][ T3665] netlink: 20 bytes leftover after parsing attributes in process `syz.2.52'. [ 37.502377][ T3648] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.623752][ T3684] netlink: 40 bytes leftover after parsing attributes in process `syz.4.57'. [ 37.708246][ T3706] EXT4-fs: Ignoring removed orlov option [ 37.728314][ T3706] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.814814][ T3710] FAULT_INJECTION: forcing a failure. [ 37.814814][ T3710] name failslab, interval 1, probability 0, space 0, times 0 [ 37.814965][ T3710] CPU: 1 UID: 0 PID: 3710 Comm: syz.3.65 Not tainted syzkaller #0 PREEMPT(lazy) [ 37.814992][ T3710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 37.815013][ T3710] Call Trace: [ 37.815021][ T3710] [ 37.815029][ T3710] __dump_stack+0x1d/0x30 [ 37.815077][ T3710] dump_stack_lvl+0x95/0xd0 [ 37.815097][ T3710] dump_stack+0x15/0x1b [ 37.815149][ T3710] should_fail_ex+0x262/0x280 [ 37.815208][ T3710] ? bpf_int_jit_compile+0x107/0xdb0 [ 37.815254][ T3710] should_failslab+0x8c/0xb0 [ 37.815281][ T3710] __kmalloc_cache_noprof+0x7a/0x400 [ 37.815311][ T3710] ? bpf_int_jit_compile+0x107/0xdb0 [ 37.815486][ T3710] bpf_int_jit_compile+0x107/0xdb0 [ 37.815519][ T3710] __bpf_prog_select_runtime+0x461/0x750 [ 37.815549][ T3710] bpf_prog_select_runtime+0x1f/0x30 [ 37.815662][ T3710] bpf_prepare_filter+0xbe3/0xc40 [ 37.815721][ T3710] __get_filter+0x1d0/0x230 [ 37.815815][ T3710] sk_attach_filter+0x25/0x280 [ 37.815848][ T3710] ? sk_setsockopt+0x1eec/0x20e0 [ 37.815883][ T3710] sk_setsockopt+0x1ef9/0x20e0 [ 37.815914][ T3710] sock_setsockopt+0x40/0x50 [ 37.815941][ T3710] __sys_setsockopt+0x13a/0x200 [ 37.815968][ T3710] __x64_sys_setsockopt+0x64/0x80 [ 37.816072][ T3710] x64_sys_call+0x248f/0x2550 [ 37.816100][ T3710] do_syscall_64+0x112/0x360 [ 37.816131][ T3710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 37.816220][ T3710] RIP: 0033:0x7fed6380e159 [ 37.816247][ T3710] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 37.816263][ T3710] RSP: 002b:00007fed62267028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 37.816285][ T3710] RAX: ffffffffffffffda RBX: 00007fed63a95fa0 RCX: 00007fed6380e159 [ 37.816301][ T3710] RDX: 000000000000001a RSI: 0000000000000001 RDI: 0000000000000009 [ 37.816315][ T3710] RBP: 00007fed638a5024 R08: 0000000000000010 R09: 0000000000000000 [ 37.816369][ T3710] R10: 0000200000ab9ff0 R11: 0000000000000246 R12: 0000000000000000 [ 37.816411][ T3710] R13: 00007fed63a96038 R14: 00007fed63a95fa0 R15: 00007ffdaba0fee8 [ 37.816427][ T3710] [ 37.948538][ T3719] EXT4-fs: Ignoring removed orlov option [ 37.990977][ T3719] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.092008][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.215604][ T3729] set_capacity_and_notify: 2 callbacks suppressed [ 38.215642][ T3729] loop2: detected capacity change from 0 to 512 [ 38.224064][ T3742] netlink: 28 bytes leftover after parsing attributes in process `syz.3.75'. [ 38.224096][ T3742] netlink: 36 bytes leftover after parsing attributes in process `syz.3.75'. [ 38.224227][ T3742] netlink: 28 bytes leftover after parsing attributes in process `syz.3.75'. [ 38.247180][ T3742] __nla_validate_parse: 99 callbacks suppressed [ 38.247195][ T3742] netlink: 28 bytes leftover after parsing attributes in process `syz.3.75'. [ 38.247213][ T3742] netlink: 36 bytes leftover after parsing attributes in process `syz.3.75'. [ 38.247476][ T3742] netlink: 28 bytes leftover after parsing attributes in process `syz.3.75'. [ 38.247492][ T3742] netlink: 36 bytes leftover after parsing attributes in process `syz.3.75'. [ 38.247666][ T3742] netlink: 28 bytes leftover after parsing attributes in process `syz.3.75'. [ 38.247683][ T3742] netlink: 36 bytes leftover after parsing attributes in process `syz.3.75'. [ 38.247805][ T3742] netlink: 28 bytes leftover after parsing attributes in process `syz.3.75'. [ 38.247821][ T3742] netlink: 36 bytes leftover after parsing attributes in process `syz.3.75'. [ 38.248037][ T3742] netlink: 28 bytes leftover after parsing attributes in process `syz.3.75'. [ 38.248052][ T3742] netlink: 36 bytes leftover after parsing attributes in process `syz.3.75'. [ 38.362147][ T3729] EXT4-fs: Ignoring removed bh option [ 38.405355][ T3733] loop1: detected capacity change from 0 to 512 [ 38.408350][ T3729] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.412222][ T3729] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.520045][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.587434][ T3733] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.587905][ T3733] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.603127][ T3748] loop3: detected capacity change from 0 to 1024 [ 38.613473][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.627012][ T3748] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.659796][ T3748] ip_tables: iptables: counters copy to user failed while replacing table [ 38.790580][ T11] kernel read not supported for file /52/net/raw6 (pid: 11 comm: kworker/0:1) [ 39.445383][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.519323][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.632041][ T3781] loop1: detected capacity change from 0 to 164 [ 39.646784][ T3781] iso9660: Unknown parameter '@Ù' [ 39.736158][ T29] kauditd_printk_skb: 92 callbacks suppressed [ 39.736211][ T29] audit: type=1400 audit(1788245982.313:303): avc: denied { module_request } for pid=3780 comm="syz.1.87" kmod="rtnl-link-bridge_slave" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 39.826537][ T29] audit: type=1326 audit(1788245982.403:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3783 comm="syz.0.88" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e96afe159 code=0x7ffc0000 [ 39.832733][ T29] audit: type=1326 audit(1788245982.413:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3783 comm="syz.0.88" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3e96afe159 code=0x7ffc0000 [ 39.843037][ T29] audit: type=1326 audit(1788245982.413:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3783 comm="syz.0.88" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e96afe159 code=0x7ffc0000 [ 39.843971][ T29] audit: type=1326 audit(1788245982.413:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3783 comm="syz.0.88" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7f3e96afe159 code=0x7ffc0000 [ 39.849534][ T29] audit: type=1326 audit(1788245982.413:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3783 comm="syz.0.88" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e96afe159 code=0x7ffc0000 [ 39.934467][ T29] audit: type=1400 audit(1788245982.523:309): avc: denied { read } for pid=3790 comm="syz.0.91" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 39.934548][ T29] audit: type=1400 audit(1788245982.523:310): avc: denied { open } for pid=3790 comm="syz.0.91" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 39.989319][ T29] audit: type=1400 audit(1788245982.573:311): avc: denied { create } for pid=3788 comm="syz.1.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 39.991185][ T29] audit: type=1400 audit(1788245982.573:312): avc: denied { ioctl } for pid=3790 comm="syz.0.91" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x6e87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 40.024012][ T3779] loop3: detected capacity change from 0 to 512 [ 40.075918][ T3779] EXT4-fs (loop3): fragment/cluster size (1024) != block size (2048) [ 40.387639][ T3815] loop0: detected capacity change from 0 to 164 [ 40.397717][ T3815] iso9660: Unknown parameter '@Ù' [ 40.456063][ T3819] tipc: Started in network mode [ 40.456106][ T3819] tipc: Node identity 561f4d2af1be, cluster identity 4711 [ 40.456153][ T3819] tipc: Enabled bearer , priority 0 [ 40.476465][ T3819] syzkaller0: entered promiscuous mode [ 40.476492][ T3819] syzkaller0: entered allmulticast mode [ 40.518900][ T3822] loop0: detected capacity change from 0 to 164 [ 40.533591][ T3819] tipc: Resetting bearer [ 40.544801][ T3822] iso9660: Unknown parameter '@Ù' [ 40.581909][ T3834] erspan0: entered promiscuous mode [ 40.582054][ T3834] macvtap1: entered promiscuous mode [ 40.582112][ T3834] macvtap1: entered allmulticast mode [ 40.582124][ T3834] erspan0: entered allmulticast mode [ 40.605958][ T3834] FAULT_INJECTION: forcing a failure. [ 40.605958][ T3834] name failslab, interval 1, probability 0, space 0, times 0 [ 40.605987][ T3834] CPU: 0 UID: 0 PID: 3834 Comm: syz.2.106 Not tainted syzkaller #0 PREEMPT(lazy) [ 40.606011][ T3834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 40.606021][ T3834] Call Trace: [ 40.606049][ T3834] [ 40.606061][ T3834] __dump_stack+0x1d/0x30 [ 40.606087][ T3834] dump_stack_lvl+0x95/0xd0 [ 40.606160][ T3834] dump_stack+0x15/0x1b [ 40.606198][ T3834] should_fail_ex+0x262/0x280 [ 40.606218][ T3834] ? skb_clone+0x151/0x1f0 [ 40.606244][ T3834] should_failslab+0x8c/0xb0 [ 40.606269][ T3834] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 40.606346][ T3834] ? skb_clone+0x151/0x1f0 [ 40.606375][ T3834] skb_clone+0x151/0x1f0 [ 40.606466][ T3834] __netlink_deliver_tap+0x2be/0x510 [ 40.606570][ T3834] netlink_unicast+0x656/0x680 [ 40.606684][ T3834] netlink_sendmsg+0x5be/0x6f0 [ 40.606718][ T3834] ? __pfx_netlink_sendmsg+0x10/0x10 [ 40.606744][ T3834] ____sys_sendmsg+0x532/0x580 [ 40.606775][ T3834] ___sys_sendmsg+0x195/0x1e0 [ 40.606883][ T3834] __x64_sys_sendmsg+0xd4/0x160 [ 40.606916][ T3834] x64_sys_call+0x22ab/0x2550 [ 40.606977][ T3834] do_syscall_64+0x112/0x360 [ 40.607005][ T3834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.607026][ T3834] RIP: 0033:0x7f5cae93e159 [ 40.607123][ T3834] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 40.607139][ T3834] RSP: 002b:00007f5cad397028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 40.607157][ T3834] RAX: ffffffffffffffda RBX: 00007f5caebc5fa0 RCX: 00007f5cae93e159 [ 40.607171][ T3834] RDX: 000000000000c084 RSI: 0000200000000000 RDI: 0000000000000003 [ 40.607185][ T3834] RBP: 00007f5cad397090 R08: 0000000000000000 R09: 0000000000000000 [ 40.607212][ T3834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 40.607223][ T3834] R13: 00007f5caebc6038 R14: 00007f5caebc5fa0 R15: 00007ffc05d273f8 [ 40.607317][ T3834] [ 40.676013][ T3834] erspan0: left allmulticast mode [ 40.676125][ T3834] erspan0: left promiscuous mode [ 40.687070][ T3834] macvtap1: left promiscuous mode [ 40.687089][ T3834] macvtap1: left allmulticast mode [ 40.717426][ T3819] tipc: Resetting bearer [ 40.731367][ T3819] tipc: Disabling bearer [ 40.738533][ T3840] Driver unsupported XDP return value 0 on prog (id 17) dev N/A, expect packet loss! [ 40.867379][ T3851] erspan0: entered promiscuous mode [ 40.867446][ T3851] macvtap2: entered promiscuous mode [ 40.867536][ T3851] macvtap2: entered allmulticast mode [ 40.867552][ T3851] erspan0: entered allmulticast mode [ 40.895914][ T3854] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Remote Mapping info ret = -22) [ 40.921991][ T3856] loop2: detected capacity change from 0 to 164 [ 40.929660][ T3856] iso9660: Unknown parameter '@Ù' [ 40.954017][ T3849] loop1: detected capacity change from 0 to 4096 [ 40.961436][ T3849] ext4: Unknown parameter ' [ 40.961436][ T3849] ' [ 41.045372][ T3756] loop4: detected capacity change from 0 to 1024 [ 41.134016][ T3860] EXT4-fs (loop3): fragment/cluster size (1024) != block size (2048) [ 41.137489][ T3870] iso9660: Unknown parameter '@Ù' [ 41.194470][ T3756] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.504349][ T3887] EXT4-fs: Ignoring removed orlov option [ 41.526971][ T3887] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 41.552597][ T3888] netlink: 'syz.0.118': attribute type 3 has an invalid length. [ 41.691297][ T3887] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 41.706017][ T3887] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 41.716857][ T3887] EXT4-fs (loop2): orphan cleanup on readonly fs [ 41.733854][ T3887] EXT4-fs error (device loop2): __ext4_get_inode_loc:4916: comm syz.2.119: Invalid inode table block 0 in block_group 0 [ 41.748721][ T3887] loop2: lost filesystem error report for type 5 error -117 [ 41.749097][ T3887] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6517: Corrupt filesystem [ 41.757367][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 41.757390][ C1] EXT4-fs (loop2): initial error at time 1788245984: __ext4_get_inode_loc:4916 [ 41.757418][ C1] EXT4-fs (loop2): last error at time 1788245984: __ext4_get_inode_loc:4916 [ 41.798826][ T3887] loop2: lost filesystem error report for type 5 error -117 [ 41.799047][ T3887] EXT4-fs error (device loop2): ext4_quota_write:7458: inode #3: comm syz.2.119: mark_inode_dirty error [ 41.799132][ T3887] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 41.825024][ T3887] EXT4-fs error (device loop2): ext4_acquire_dquot:7069: comm syz.2.119: Failed to acquire dquot type 0 [ 41.825119][ T3887] loop2: lost filesystem error report for type 5 error -117 [ 41.848674][ T3887] EXT4-fs error (device loop2): __ext4_get_inode_loc:4916: comm syz.2.119: Invalid inode table block 0 in block_group 0 [ 41.848733][ T3887] loop2: lost filesystem error report for type 5 error -117 [ 41.857775][ T3887] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6517: Corrupt filesystem [ 41.857884][ T3887] loop2: lost filesystem error report for type 5 error -117 [ 41.889651][ T3887] EXT4-fs error (device loop2): ext4_ext_truncate:4565: inode #15: comm syz.2.119: mark_inode_dirty error [ 41.909518][ T3887] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 41.915564][ T3887] EXT4-fs error (device loop2): __ext4_get_inode_loc:4916: comm syz.2.119: Invalid inode table block 0 in block_group 0 [ 41.915808][ T3887] loop2: lost filesystem error report for type 5 error -117 [ 41.946405][ T3887] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6517: Corrupt filesystem [ 41.965774][ T3887] loop2: lost filesystem error report for type 5 error -117 [ 41.969215][ T3887] EXT4-fs error (device loop2) in ext4_orphan_del:304: Corrupt filesystem [ 41.991074][ T3887] loop2: lost filesystem error report for type 5 error -117 [ 41.991255][ T3887] EXT4-fs error (device loop2): __ext4_get_inode_loc:4916: comm syz.2.119: Invalid inode table block 0 in block_group 0 [ 41.991294][ T3887] loop2: lost filesystem error report for type 5 error -117 [ 42.014017][ T3887] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6517: Corrupt filesystem [ 42.014151][ T3887] loop2: lost filesystem error report for type 5 error -117 [ 42.033475][ T3887] EXT4-fs error (device loop2): ext4_truncate:4721: inode #15: comm syz.2.119: mark_inode_dirty error [ 42.033542][ T3887] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 42.058482][ T3887] EXT4-fs error (device loop2) in ext4_process_orphan:346: Corrupt filesystem [ 42.080519][ T3887] EXT4-fs (loop2): 1 truncate cleaned up [ 42.430978][ T3887] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 42.452063][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.475600][ T3885] vhci_hcd vhci_hcd.4: invalid port number 236 [ 42.475656][ T3885] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 42.497695][ T3885] EXT4-fs error (device loop2): __ext4_get_inode_loc:4916: comm syz.2.119: Invalid inode table block 0 in block_group 0 [ 42.549362][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.586643][ T3892] tipc: Enabled bearer , priority 0 [ 42.596460][ T3892] syzkaller0: entered promiscuous mode [ 42.596486][ T3892] syzkaller0: entered allmulticast mode [ 42.616180][ T3892] tipc: Resetting bearer [ 42.661125][ T3892] tipc: Resetting bearer [ 42.680077][ T3892] tipc: Disabling bearer [ 42.737011][ T3897] geneve2: entered allmulticast mode [ 42.763101][ T3900] FAULT_INJECTION: forcing a failure. [ 42.763101][ T3900] name failslab, interval 1, probability 0, space 0, times 0 [ 42.763218][ T3900] CPU: 1 UID: 0 PID: 3900 Comm: syz.4.125 Not tainted syzkaller #0 PREEMPT(lazy) [ 42.763291][ T3900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 42.763302][ T3900] Call Trace: [ 42.763308][ T3900] [ 42.763343][ T3900] __dump_stack+0x1d/0x30 [ 42.763365][ T3900] dump_stack_lvl+0x95/0xd0 [ 42.763383][ T3900] dump_stack+0x15/0x1b [ 42.763400][ T3900] should_fail_ex+0x262/0x280 [ 42.763423][ T3900] ? skb_clone+0x151/0x1f0 [ 42.763471][ T3900] should_failslab+0x8c/0xb0 [ 42.763496][ T3900] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 42.763523][ T3900] ? skb_clone+0x151/0x1f0 [ 42.763592][ T3900] skb_clone+0x151/0x1f0 [ 42.763688][ T3900] __netlink_deliver_tap+0x2be/0x510 [ 42.763713][ T3900] netlink_unicast+0x656/0x680 [ 42.763734][ T3900] netlink_sendmsg+0x5be/0x6f0 [ 42.763799][ T3900] ? __pfx_netlink_sendmsg+0x10/0x10 [ 42.763825][ T3900] ____sys_sendmsg+0x532/0x580 [ 42.763853][ T3900] ___sys_sendmsg+0x195/0x1e0 [ 42.763894][ T3900] __x64_sys_sendmsg+0xd4/0x160 [ 42.763930][ T3900] x64_sys_call+0x22ab/0x2550 [ 42.764033][ T3900] do_syscall_64+0x112/0x360 [ 42.764056][ T3900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.764080][ T3900] RIP: 0033:0x7f9ae7bfe159 [ 42.764094][ T3900] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 42.764123][ T3900] RSP: 002b:00007f9ae6657028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 42.764140][ T3900] RAX: ffffffffffffffda RBX: 00007f9ae7e85fa0 RCX: 00007f9ae7bfe159 [ 42.764154][ T3900] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 42.764168][ T3900] RBP: 00007f9ae6657090 R08: 0000000000000000 R09: 0000000000000000 [ 42.764226][ T3900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 42.764240][ T3900] R13: 00007f9ae7e86038 R14: 00007f9ae7e85fa0 R15: 00007ffe7a6ad138 [ 42.764259][ T3900] [ 42.828449][ T3898] iso9660: Unknown parameter '@Ù' [ 43.052446][ T3905] netlink: 'syz.0.126': attribute type 6 has an invalid length. [ 43.110413][ T3907] FAULT_INJECTION: forcing a failure. [ 43.110413][ T3907] name failslab, interval 1, probability 0, space 0, times 0 [ 43.112792][ T3907] CPU: 0 UID: 0 PID: 3907 Comm: syz.4.127 Not tainted syzkaller #0 PREEMPT(lazy) [ 43.112817][ T3907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 43.112855][ T3907] Call Trace: [ 43.112862][ T3907] [ 43.112869][ T3907] __dump_stack+0x1d/0x30 [ 43.112890][ T3907] dump_stack_lvl+0x95/0xd0 [ 43.112908][ T3907] dump_stack+0x15/0x1b [ 43.112983][ T3907] should_fail_ex+0x262/0x280 [ 43.113048][ T3907] ? proc_self_get_link+0x96/0x110 [ 43.113080][ T3907] should_failslab+0x8c/0xb0 [ 43.113157][ T3907] __kmalloc_cache_noprof+0x7a/0x400 [ 43.113242][ T3907] ? proc_self_get_link+0x96/0x110 [ 43.113272][ T3907] ? __pfx_proc_self_get_link+0x10/0x10 [ 43.113366][ T3907] proc_self_get_link+0x96/0x110 [ 43.113396][ T3907] pick_link+0x514/0x8e0 [ 43.113418][ T3907] step_into_slowpath+0x36a/0x4c0 [ 43.113444][ T3907] ? inode_permission+0x1da/0x3b0 [ 43.113464][ T3907] link_path_walk+0x947/0xdd0 [ 43.113488][ T3907] path_openat+0xe7/0x10d0 [ 43.113526][ T3907] do_file_open+0x16c/0x290 [ 43.113556][ T3907] do_sys_openat2+0xa0/0x130 [ 43.113577][ T3907] __x64_sys_openat+0xf2/0x120 [ 43.113616][ T3907] x64_sys_call+0x1f72/0x2550 [ 43.113640][ T3907] do_syscall_64+0x112/0x360 [ 43.113703][ T3907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.113723][ T3907] RIP: 0033:0x7f9ae7bbe98e [ 43.113739][ T3907] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 43.113773][ T3907] RSP: 002b:00007f9ae6656ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 43.113801][ T3907] RAX: ffffffffffffffda RBX: 00007f9ae66576c0 RCX: 00007f9ae7bbe98e [ 43.113815][ T3907] RDX: 0000000000000002 RSI: 00007f9ae6656f90 RDI: ffffffffffffff9c [ 43.113828][ T3907] RBP: 00007f9ae6657090 R08: 0000000000000000 R09: 0000000000000000 [ 43.113841][ T3907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 43.113854][ T3907] R13: 00007f9ae7e86038 R14: 00007f9ae7e85fa0 R15: 00007ffe7a6ad138 [ 43.113871][ T3907] [ 43.171001][ T3916] ext4: Unknown parameter 'permit_directio' [ 43.230617][ T3907] xt_hashlimit: invalid interval [ 43.284887][ T3916] syz.3.130 uses obsolete (PF_INET,SOCK_PACKET) [ 43.298300][ T3905] set_capacity_and_notify: 6 callbacks suppressed [ 43.298323][ T3905] loop0: detected capacity change from 0 to 512 [ 43.330115][ T3916] sit0: entered promiscuous mode [ 43.355148][ T3916] netlink: 'syz.3.130': attribute type 1 has an invalid length. [ 43.355166][ T3916] __nla_validate_parse: 30 callbacks suppressed [ 43.355176][ T3916] netlink: 9 bytes leftover after parsing attributes in process `syz.3.130'. [ 43.364439][ T3905] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 43.364522][ T3905] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 43.405840][ T3905] EXT4-fs (loop0): 1 truncate cleaned up [ 43.416736][ T3905] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.514117][ T988] hid-generic 0000:0000:0001.0001: unknown main item tag 0x0 [ 43.514220][ T988] hid-generic 0000:0000:0001.0001: unknown main item tag 0x0 [ 43.514245][ T988] hid-generic 0000:0000:0001.0001: unknown main item tag 0x0 [ 43.514279][ T988] hid-generic 0000:0000:0001.0001: unknown main item tag 0x0 [ 43.514300][ T988] hid-generic 0000:0000:0001.0001: unknown main item tag 0x0 [ 43.514325][ T988] hid-generic 0000:0000:0001.0001: unknown main item tag 0x0 [ 43.514350][ T988] hid-generic 0000:0000:0001.0001: unknown main item tag 0x0 [ 43.514375][ T988] hid-generic 0000:0000:0001.0001: unknown main item tag 0x0 [ 43.544817][ T988] hid-generic 0000:0000:0001.0001: hidraw0: HID v0.10 Device [syz0] on syz1 [ 44.080751][ T3928] loop2: detected capacity change from 0 to 1024 [ 44.091477][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.129122][ T3925] loop1: detected capacity change from 0 to 512 [ 44.130754][ T3928] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 44.130969][ T3928] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.141285][ T3928] EXT4-fs error (device loop2): ext4_map_blocks:832: inode #15: comm syz.2.133: lblock 0 mapped to illegal pblock 0 (length 1) [ 44.176109][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 44.183463][ T3934] loop4: detected capacity change from 0 to 1024 [ 44.186436][ T3934] EXT4-fs: Ignoring removed bh option [ 44.197745][ T3934] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.222406][ T3925] EXT4-fs (loop1): fragment/cluster size (1024) != block size (2048) [ 44.224387][ T3934] netlink: 48 bytes leftover after parsing attributes in process `syz.4.136'. [ 44.418965][ T3946] netlink: 60 bytes leftover after parsing attributes in process `syz.1.134'. [ 44.780989][ T3951] loop0: detected capacity change from 0 to 164 [ 44.782055][ T3951] iso9660: Unknown parameter '@Ù' [ 44.887079][ T3956] netlink: 8 bytes leftover after parsing attributes in process `syz.0.141'. [ 44.897705][ T29] kauditd_printk_skb: 384 callbacks suppressed [ 44.897722][ T29] audit: type=1400 audit(1788245987.483:695): avc: denied { write } for pid=3955 comm="syz.0.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 44.910557][ T29] audit: type=1400 audit(1788245987.493:696): avc: denied { mount } for pid=3955 comm="syz.0.141" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 44.918072][ T29] audit: type=1400 audit(1788245987.503:697): avc: denied { search } for pid=3955 comm="syz.0.141" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 44.920628][ T29] audit: type=1400 audit(1788245987.503:698): avc: denied { search } for pid=3955 comm="syz.0.141" name="events" dev="tracefs" ino=47 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 44.922267][ T29] audit: type=1400 audit(1788245987.513:699): avc: denied { search } for pid=3955 comm="syz.0.141" name="sched" dev="tracefs" ino=6949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 44.926412][ T29] audit: type=1400 audit(1788245987.513:700): avc: denied { search } for pid=3955 comm="syz.0.141" name="sched_switch" dev="tracefs" ino=6951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 44.930591][ T29] audit: type=1400 audit(1788245987.513:701): avc: denied { write } for pid=3955 comm="syz.0.141" name="filter" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 44.936180][ T29] audit: type=1400 audit(1788245987.513:702): avc: denied { open } for pid=3955 comm="syz.0.141" path="/25/tracing/events/sched/sched_switch/filter" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 45.012857][ T29] audit: type=1400 audit(1788245987.603:703): avc: denied { unmount } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 45.104356][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.829932][ T3976] syzkaller0: entered promiscuous mode [ 45.830140][ T3976] syzkaller0: entered allmulticast mode [ 45.883096][ T3987] loop0: detected capacity change from 0 to 256 [ 45.895449][ T3987] vfat: Unexpected value for 'rodir' [ 45.914380][ T3983] loop2: detected capacity change from 0 to 512 [ 46.256397][ T29] audit: type=1400 audit(1788245988.823:704): avc: denied { bind } for pid=3984 comm="syz.1.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 46.288794][ T3978] tipc: Started in network mode [ 46.295135][ T3978] tipc: Node identity d63cfb66d99f, cluster identity 4711 [ 46.303762][ T3978] tipc: Enabled bearer , priority 0 [ 46.390627][ T3983] EXT4-fs (loop2): invalid journal inode [ 46.390848][ T3983] EXT4-fs (loop2): can't get journal size [ 46.427895][ T3975] tipc: Resetting bearer [ 46.438637][ T3983] EXT4-fs (loop2): 1 truncate cleaned up [ 46.448564][ T3983] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.465982][ T3975] tipc: Disabling bearer [ 46.609926][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.859969][ T4023] loop1: detected capacity change from 0 to 512 [ 46.894396][ T4023] EXT4-fs (loop1): invalid journal inode [ 46.894623][ T4023] EXT4-fs (loop1): can't get journal size [ 46.921303][ T4023] EXT4-fs (loop1): 1 truncate cleaned up [ 46.933887][ T4023] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.469686][ T4041] capability: warning: `syz.0.166' uses 32-bit capabilities (legacy support in use) [ 47.474945][ T4051] loop2: detected capacity change from 0 to 164 [ 47.492356][ T4051] rock: corrupted directory entry. extent=134217760 out of volume (nzones=41) [ 47.513447][ T4053] netlink: 12 bytes leftover after parsing attributes in process `syz.4.170'. [ 47.532840][ T4051] xt_l2tp: missing protocol rule (udp|l2tpip) [ 47.544973][ T4053] loop4: detected capacity change from 0 to 1024 [ 47.554241][ T4053] EXT4-fs: inline encryption not supported [ 47.563717][ T4053] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.587958][ T4055] iso9660: Unknown parameter '@Ù' [ 47.607491][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.713999][ T4051] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.788668][ T4075] EXT4-fs: Ignoring removed i_version option [ 47.795089][ T4075] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 47.813540][ T4075] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.813605][ T4075] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.849314][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.870287][ T4079] iso9660: Unknown parameter '@Ù' [ 47.927119][ T4051] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.960246][ T4081] lo: entered allmulticast mode [ 47.991270][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.070614][ T4090] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 48.070963][ T4051] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.093511][ T4090] ext4 filesystem being mounted at /36/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 48.325333][ T4051] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.360007][ T4094] lo: left allmulticast mode [ 48.372924][ T4117] set_capacity_and_notify: 4 callbacks suppressed [ 48.372957][ T4117] loop3: detected capacity change from 0 to 512 [ 48.379720][ T4114] tipc: Enabled bearer , priority 0 [ 48.382484][ T4115] loop1: detected capacity change from 0 to 2048 [ 48.406266][ T358] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.406401][ T4114] syzkaller0: entered promiscuous mode [ 48.406417][ T4114] syzkaller0: entered allmulticast mode [ 48.421449][ T3300] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 48.444795][ T4115] loop1: p2 p3 p7 [ 48.461886][ T358] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.471964][ T4114] tipc: Resetting bearer [ 48.482578][ T4119] loop0: detected capacity change from 0 to 512 [ 48.491390][ T4114] tipc: Disabling bearer [ 48.508236][ T4119] FAULT_INJECTION: forcing a failure. [ 48.508236][ T4119] name failslab, interval 1, probability 0, space 0, times 0 [ 48.508328][ T4119] CPU: 0 UID: 0 PID: 4119 Comm: syz.0.194 Not tainted syzkaller #0 PREEMPT(lazy) [ 48.508350][ T4119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 48.508429][ T4119] Call Trace: [ 48.508435][ T4119] [ 48.508442][ T4119] __dump_stack+0x1d/0x30 [ 48.508462][ T4119] dump_stack_lvl+0x95/0xd0 [ 48.508482][ T4119] dump_stack+0x15/0x1b [ 48.508500][ T4119] should_fail_ex+0x262/0x280 [ 48.508557][ T4119] ? security_file_alloc+0x32/0xf0 [ 48.508634][ T4119] should_failslab+0x8c/0xb0 [ 48.508661][ T4119] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 48.508735][ T4119] ? security_file_alloc+0x32/0xf0 [ 48.508795][ T4119] security_file_alloc+0x32/0xf0 [ 48.508822][ T4119] init_file+0x5b/0x1b0 [ 48.508841][ T4119] alloc_empty_file+0x85/0x1e0 [ 48.508861][ T4119] path_openat+0x50/0x10d0 [ 48.508930][ T4119] ? kstrtouint+0x76/0xc0 [ 48.508958][ T4119] do_file_open+0x16c/0x290 [ 48.508997][ T4119] do_sys_openat2+0xa0/0x130 [ 48.509018][ T4119] __x64_sys_creat+0x65/0x90 [ 48.509050][ T4119] x64_sys_call+0xea6/0x2550 [ 48.509098][ T4119] do_syscall_64+0x112/0x360 [ 48.509124][ T4119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.509146][ T4119] RIP: 0033:0x7f3e96afe159 [ 48.509162][ T4119] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 48.509249][ T4119] RSP: 002b:00007f3e95557028 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 48.509268][ T4119] RAX: ffffffffffffffda RBX: 00007f3e96d85fa0 RCX: 00007f3e96afe159 [ 48.509282][ T4119] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000080 [ 48.509295][ T4119] RBP: 00007f3e95557090 R08: 0000000000000000 R09: 0000000000000000 [ 48.509360][ T4119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 48.509372][ T4119] R13: 00007f3e96d86038 R14: 00007f3e96d85fa0 R15: 00007ffcf240eaf8 [ 48.509390][ T4119] [ 48.526826][ T51] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.571731][ T31] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.666229][ T4127] loop0: detected capacity change from 0 to 1024 [ 48.698115][ T4127] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 48.698173][ T4127] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.725904][ T4115] can0: slcan on ttyS3. [ 48.727265][ T4127] EXT4-fs error (device loop0): ext4_map_blocks:832: inode #15: comm syz.0.197: lblock 0 mapped to illegal pblock 0 (length 1) [ 48.771364][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 48.780937][ T4131] can0 (unregistered): slcan off ttyS3. [ 49.395482][ T4148] netlink: 48 bytes leftover after parsing attributes in process `syz.0.205'. [ 49.397381][ T4152] loop1: detected capacity change from 0 to 1024 [ 49.419285][ T4152] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 49.419405][ T4152] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.425413][ T4152] EXT4-fs error (device loop1): ext4_map_blocks:832: inode #15: comm syz.1.204: lblock 0 mapped to illegal pblock 0 (length 1) [ 49.445571][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 49.461360][ T4148] netlink: 'syz.0.205': attribute type 8 has an invalid length. [ 49.494658][ T4161] loop3: detected capacity change from 0 to 1024 [ 49.520961][ T4161] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 49.521028][ T4161] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.532367][ T4161] EXT4-fs error (device loop3): ext4_map_blocks:832: inode #15: comm syz.3.210: lblock 0 mapped to illegal pblock 0 (length 1) [ 49.583288][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 49.622501][ T4181] loop3: detected capacity change from 0 to 164 [ 49.630205][ T4181] iso9660: Unknown parameter '@Ù' [ 49.633932][ T4179] FAULT_INJECTION: forcing a failure. [ 49.633932][ T4179] name failslab, interval 1, probability 0, space 0, times 0 [ 49.633959][ T4179] CPU: 0 UID: 0 PID: 4179 Comm: syz.0.216 Not tainted syzkaller #0 PREEMPT(lazy) [ 49.634039][ T4179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 49.634052][ T4179] Call Trace: [ 49.634059][ T4179] [ 49.634067][ T4179] __dump_stack+0x1d/0x30 [ 49.634187][ T4179] dump_stack_lvl+0x95/0xd0 [ 49.634209][ T4179] dump_stack+0x15/0x1b [ 49.634229][ T4179] should_fail_ex+0x262/0x280 [ 49.634325][ T4179] ? __kernfs_new_node+0x70/0x440 [ 49.634356][ T4179] should_failslab+0x8c/0xb0 [ 49.634399][ T4179] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 49.634434][ T4179] ? __kernfs_new_node+0x70/0x440 [ 49.634467][ T4179] __kernfs_new_node+0x70/0x440 [ 49.634562][ T4179] ? rb_insert_color+0x291/0x2a0 [ 49.634588][ T4179] ? __rcu_read_unlock+0x4e/0x70 [ 49.634615][ T4179] ? __rcu_read_unlock+0x4e/0x70 [ 49.634644][ T4179] ? kernfs_activate_one+0x10c/0x140 [ 49.634696][ T4179] ? __rcu_read_unlock+0x4e/0x70 [ 49.634726][ T4179] ? up_write+0x19/0x60 [ 49.634756][ T4179] kernfs_new_node+0xcf/0xf0 [ 49.634826][ T4179] __kernfs_create_file+0x4b/0x180 [ 49.634847][ T4179] ? __pfx_dev_attr_show+0x10/0x10 [ 49.634874][ T4179] ? __pfx_dev_attr_store+0x10/0x10 [ 49.634913][ T4179] sysfs_add_file_mode_ns+0x132/0x1b0 [ 49.634939][ T4179] sysfs_merge_group+0xed/0x1c0 [ 49.635124][ T4179] dpm_sysfs_add+0xaf/0x1e0 [ 49.635148][ T4179] device_add+0x3bc/0x790 [ 49.635167][ T4179] device_create+0x183/0x1e0 [ 49.635271][ T4179] ? csi_J+0x697/0x7d0 [ 49.635373][ T4179] ? reset_terminal+0x630/0x650 [ 49.635412][ T4179] vcs_make_sysfs+0x32/0x90 [ 49.635493][ T4179] vc_allocate+0x3ad/0x3e0 [ 49.635533][ T4179] con_install+0x44/0x330 [ 49.635562][ T4179] tty_init_dev+0x7c/0x320 [ 49.635587][ T4179] tty_open+0x6c6/0xb00 [ 49.635640][ T4179] chrdev_open+0x2eb/0x3a0 [ 49.635671][ T4179] do_dentry_open+0x49f/0xa60 [ 49.635690][ T4179] ? __pfx_chrdev_open+0x10/0x10 [ 49.635720][ T4179] vfs_open+0x37/0x1e0 [ 49.635784][ T4179] path_openat+0xc01/0x10d0 [ 49.635811][ T4179] do_file_open+0x16c/0x290 [ 49.635879][ T4179] do_sys_openat2+0xa0/0x130 [ 49.635899][ T4179] __x64_sys_openat+0xf2/0x120 [ 49.635919][ T4179] x64_sys_call+0x1f72/0x2550 [ 49.635945][ T4179] do_syscall_64+0x112/0x360 [ 49.635998][ T4179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.636020][ T4179] RIP: 0033:0x7f3e96abe98e [ 49.636037][ T4179] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 49.636054][ T4179] RSP: 002b:00007f3e95556b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 49.636138][ T4179] RAX: ffffffffffffffda RBX: 00007f3e955576c0 RCX: 00007f3e96abe98e [ 49.636152][ T4179] RDX: 0000000000000002 RSI: 00007f3e95556c00 RDI: ffffffffffffff9c [ 49.636166][ T4179] RBP: 00007f3e96b95024 R08: 0000000000000000 R09: 0000000000000000 [ 49.636179][ T4179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 49.636191][ T4179] R13: 00007f3e96d86038 R14: 00007f3e96d85fa0 R15: 00007ffcf240eaf8 [ 49.636209][ T4179] [ 49.637946][ T4180] loop4: detected capacity change from 0 to 512 [ 49.638511][ T4180] ext4: Bad value for 'data' [ 49.721634][ T4179] loop0: detected capacity change from 0 to 512 [ 49.722079][ T4179] ext4: Unknown parameter 'permit_directio' [ 49.876665][ T4187] loop2: detected capacity change from 0 to 512 [ 49.877018][ T4187] EXT4-fs: Ignoring removed i_version option [ 49.886004][ T4187] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 49.891620][ T4187] EXT4-fs error (device loop2) in ext4_process_orphan:346: Corrupt filesystem [ 49.891641][ T4187] fserror_report: 1 callbacks suppressed [ 49.891651][ T4187] loop2: lost filesystem error report for type 5 error -117 [ 49.895080][ T4187] EXT4-fs (loop2): 2 truncates cleaned up [ 49.895677][ T4187] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.061622][ T4190] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 50.061721][ T4190] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.071995][ T29] kauditd_printk_skb: 379 callbacks suppressed [ 50.072036][ T29] audit: type=1400 audit(1788245992.653:1082): avc: denied { write } for pid=4189 comm="syz.1.219" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 50.136775][ T4190] EXT4-fs error (device loop1): ext4_map_blocks:832: inode #15: comm syz.1.219: lblock 0 mapped to illegal pblock 0 (length 1) [ 50.175209][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.191282][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 50.234988][ T4180] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 50.235216][ T4180] EXT4-fs (loop4): stripe (134) is not aligned with cluster size (4096), stripe is disabled [ 50.256925][ T4180] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 50.257635][ T4180] EXT4-fs (loop4): orphan cleanup on readonly fs [ 50.280331][ T4180] EXT4-fs error (device loop4): ext4_read_inode_bitmap:169: comm syz.4.215: Inode bitmap for bg 0 marked uninitialized [ 50.280631][ T4180] loop4: lost filesystem error report for type 5 error -117 [ 50.283496][ T4202] geneve2: entered promiscuous mode [ 50.283514][ T4202] geneve2: entered allmulticast mode [ 50.283658][ T51] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 50.283703][ T51] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 50.283734][ T51] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 50.283768][ T51] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 50.293533][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 50.293562][ C0] EXT4-fs (loop4): initial error at time 1788245992: ext4_read_inode_bitmap:169 [ 50.293582][ C0] EXT4-fs (loop4): last error at time 1788245992: ext4_read_inode_bitmap:169 [ 50.330121][ T29] audit: type=1400 audit(1788245992.923:1083): avc: denied { create } for pid=4201 comm="syz.2.221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 50.330304][ T29] audit: type=1326 audit(1788245992.923:1084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4203 comm="syz.1.225" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc3c40e159 code=0x7ffc0000 [ 50.330329][ T29] audit: type=1326 audit(1788245992.923:1085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4203 comm="syz.1.225" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc3c40e159 code=0x7ffc0000 [ 50.334404][ T29] audit: type=1326 audit(1788245992.923:1086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4203 comm="syz.1.225" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc3c40e159 code=0x7ffc0000 [ 50.334557][ T29] audit: type=1326 audit(1788245992.923:1087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4203 comm="syz.1.225" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc3c40e159 code=0x7ffc0000 [ 50.334654][ T29] audit: type=1326 audit(1788245992.923:1088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4203 comm="syz.1.225" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=193 compat=0 ip=0x7fbc3c40e159 code=0x7ffc0000 [ 50.334787][ T29] audit: type=1326 audit(1788245992.923:1089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4203 comm="syz.1.225" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc3c40e159 code=0x7ffc0000 [ 50.336311][ T29] audit: type=1326 audit(1788245992.923:1090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4203 comm="syz.1.225" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fbc3c40e159 code=0x7ffc0000 [ 50.336461][ T29] audit: type=1326 audit(1788245992.923:1091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4203 comm="syz.1.225" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc3c40e159 code=0x7ffc0000 [ 50.472732][ T4207] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 50.472796][ T4207] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.486869][ T4207] EXT4-fs error (device loop0): ext4_map_blocks:832: inode #15: comm syz.0.224: lblock 0 mapped to illegal pblock 0 (length 1) [ 50.488786][ T4207] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #15: comm syz.0.224: lblock 0 mapped to illegal pblock 0 (length 1) [ 50.548311][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 50.596019][ T4180] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 50.688747][ T4216] netlink: 4 bytes leftover after parsing attributes in process `syz.1.229'. [ 50.709281][ T4216] bond1: Invalid ad_actor_system MAC address. [ 50.709306][ T4216] bond1: option ad_actor_system: invalid value (1) [ 50.712755][ T4221] iso9660: Unknown parameter '@Ù' [ 50.717506][ T4216] bond1 (unregistering): Released all slaves [ 50.772498][ T4233] netlink: 580 bytes leftover after parsing attributes in process `syz.0.231'. [ 50.856329][ T4242] EXT4-fs error (device loop4): ext4_search_dir:1476: inode #2: block 16: comm syz.4.215: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 50.867691][ T4242] EXT4-fs error (device loop4): ext4_search_dir:1476: inode #2: block 16: comm syz.4.215: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 50.885845][ T4241] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 50.885956][ T4241] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.940697][ T4241] EXT4-fs error (device loop0): ext4_map_blocks:832: inode #15: comm syz.0.233: lblock 0 mapped to illegal pblock 0 (length 1) [ 50.989138][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 51.086659][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.162608][ T4257] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 51.162676][ T4257] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.175287][ T4257] EXT4-fs error (device loop0): ext4_map_blocks:832: inode #15: comm syz.0.238: lblock 0 mapped to illegal pblock 0 (length 1) [ 51.175601][ T4257] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #15: comm syz.0.238: lblock 0 mapped to illegal pblock 0 (length 1) [ 51.225486][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 51.273776][ T4269] netlink: 580 bytes leftover after parsing attributes in process `syz.4.243'. [ 51.299128][ T4266] iso9660: Unknown parameter '@Ù' [ 51.340712][ T4261] tc_dump_action: action bad kind [ 51.384925][ T4274] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 51.385073][ T4274] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.400092][ T4274] EXT4-fs error (device loop0): ext4_map_blocks:832: inode #15: comm syz.0.245: lblock 0 mapped to illegal pblock 0 (length 1) [ 51.457350][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 51.571281][ T4271] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.620227][ T4285] netlink: 'syz.2.249': attribute type 2 has an invalid length. [ 51.660013][ T4282] EXT4-fs: Ignoring removed mblk_io_submit option [ 51.660375][ T4282] EXT4-fs: Ignoring removed oldalloc option [ 51.709325][ T4282] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 51.714709][ T4282] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.782624][ T4282] EXT4-fs error (device loop0): ext4_validate_block_bitmap:445: comm syz.0.247: bg 0: block 112: padding at end of block bitmap is not set [ 51.811244][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.870661][ T4282] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 51.909619][ T4299] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 51.909700][ T4299] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.910710][ T4303] netlink: 580 bytes leftover after parsing attributes in process `syz.0.254'. [ 51.951555][ T4299] EXT4-fs error (device loop4): ext4_map_blocks:832: inode #15: comm syz.4.252: lblock 0 mapped to illegal pblock 0 (length 1) [ 51.951795][ T4299] EXT4-fs error (device loop4): ext4_map_blocks:790: inode #15: comm syz.4.252: lblock 0 mapped to illegal pblock 0 (length 1) [ 51.998346][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 52.053411][ T4308] EXT4-fs (loop1): invalid journal inode [ 52.053580][ T4308] EXT4-fs (loop1): can't get journal size [ 52.062361][ T4308] EXT4-fs (loop1): 1 truncate cleaned up [ 52.105775][ T4314] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 52.105908][ T4314] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.136616][ T4308] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.141147][ T4314] EXT4-fs error (device loop4): ext4_map_blocks:832: inode #15: comm syz.4.257: lblock 0 mapped to illegal pblock 0 (length 1) [ 52.476659][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 52.582929][ T4326] FAULT_INJECTION: forcing a failure. [ 52.582929][ T4326] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 52.582996][ T4326] CPU: 1 UID: 0 PID: 4326 Comm: syz.3.261 Not tainted syzkaller #0 PREEMPT(lazy) [ 52.583041][ T4326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 52.583120][ T4326] Call Trace: [ 52.583128][ T4326] [ 52.583136][ T4326] __dump_stack+0x1d/0x30 [ 52.583162][ T4326] dump_stack_lvl+0x95/0xd0 [ 52.583183][ T4326] dump_stack+0x15/0x1b [ 52.583211][ T4326] should_fail_ex+0x262/0x280 [ 52.583227][ T4326] should_fail+0xb/0x20 [ 52.583279][ T4326] should_fail_usercopy+0x1a/0x20 [ 52.583302][ T4326] _copy_to_user+0x20/0xa0 [ 52.583324][ T4326] simple_read_from_buffer+0xb5/0x130 [ 52.583388][ T4326] proc_fail_nth_read+0x10e/0x150 [ 52.583420][ T4326] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 52.583510][ T4326] vfs_read+0x18e/0x7c0 [ 52.583533][ T4326] ? mutex_unlock+0x4e/0x90 [ 52.583578][ T4326] ? __rcu_read_unlock+0x4e/0x70 [ 52.583606][ T4326] ? __fget_files+0x184/0x1c0 [ 52.583671][ T4326] ? mutex_lock+0x57/0x90 [ 52.583693][ T4326] ksys_read+0xdc/0x1a0 [ 52.583718][ T4326] __x64_sys_read+0x40/0x50 [ 52.583823][ T4326] x64_sys_call+0x2135/0x2550 [ 52.583857][ T4326] do_syscall_64+0x112/0x360 [ 52.583884][ T4326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.583985][ T4326] RIP: 0033:0x7fed637ce98e [ 52.584000][ T4326] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 52.584093][ T4326] RSP: 002b:00007fed62266fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 52.584113][ T4326] RAX: ffffffffffffffda RBX: 00007fed622676c0 RCX: 00007fed637ce98e [ 52.584127][ T4326] RDX: 000000000000000f RSI: 00007fed622670a0 RDI: 0000000000000003 [ 52.584139][ T4326] RBP: 00007fed62267090 R08: 0000000000000000 R09: 0000000000000000 [ 52.584152][ T4326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.584164][ T4326] R13: 00007fed63a96038 R14: 00007fed63a95fa0 R15: 00007ffdaba0fee8 [ 52.584224][ T4326] [ 52.666859][ T4322] netlink: 24 bytes leftover after parsing attributes in process `syz.0.260'. [ 52.836557][ T4335] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4335 comm=syz.0.260 [ 52.853926][ T4333] sctp: [Deprecated]: syz.3.264 (pid 4333) Use of int in maxseg socket option. [ 52.853926][ T4333] Use struct sctp_assoc_value instead [ 52.854048][ T4333] netlink: 'syz.3.264': attribute type 4 has an invalid length. [ 52.932786][ T4340] netlink: 580 bytes leftover after parsing attributes in process `syz.2.266'. [ 53.052045][ T4344] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.103474][ T4344] EXT4-fs error (device loop0): ext4_map_blocks:832: inode #15: comm syz.0.267: lblock 0 mapped to illegal pblock 0 (length 1) [ 53.119161][ T4344] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #15: comm syz.0.267: lblock 0 mapped to illegal pblock 0 (length 1) [ 53.129770][ T4353] mmap: syz.2.269 (4353) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 53.149322][ T4352] FAULT_INJECTION: forcing a failure. [ 53.149322][ T4352] name failslab, interval 1, probability 0, space 0, times 0 [ 53.149378][ T4352] CPU: 1 UID: 0 PID: 4352 Comm: syz.1.271 Not tainted syzkaller #0 PREEMPT(lazy) [ 53.149405][ T4352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 53.149418][ T4352] Call Trace: [ 53.149426][ T4352] [ 53.149434][ T4352] __dump_stack+0x1d/0x30 [ 53.149460][ T4352] dump_stack_lvl+0x95/0xd0 [ 53.149622][ T4352] dump_stack+0x15/0x1b [ 53.149643][ T4352] should_fail_ex+0x262/0x280 [ 53.149747][ T4352] ? __kernfs_new_node+0x70/0x440 [ 53.149780][ T4352] should_failslab+0x8c/0xb0 [ 53.149840][ T4352] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 53.149864][ T4352] ? __kernfs_new_node+0x70/0x440 [ 53.149972][ T4352] __kernfs_new_node+0x70/0x440 [ 53.150004][ T4352] ? rb_insert_color+0x291/0x2a0 [ 53.150030][ T4352] ? __rcu_read_unlock+0x4e/0x70 [ 53.150119][ T4352] ? __rcu_read_unlock+0x4e/0x70 [ 53.150153][ T4352] ? kernfs_activate_one+0x10c/0x140 [ 53.150169][ T4352] ? __rcu_read_unlock+0x4e/0x70 [ 53.150270][ T4352] ? up_write+0x19/0x60 [ 53.150308][ T4352] kernfs_new_node+0xcf/0xf0 [ 53.150342][ T4352] __kernfs_create_file+0x4b/0x180 [ 53.150364][ T4352] ? __pfx_dev_attr_show+0x10/0x10 [ 53.150417][ T4352] ? __pfx_dev_attr_store+0x10/0x10 [ 53.150443][ T4352] sysfs_add_file_mode_ns+0x132/0x1b0 [ 53.150468][ T4352] sysfs_merge_group+0xed/0x1c0 [ 53.150499][ T4352] dpm_sysfs_add+0xaf/0x1e0 [ 53.150524][ T4352] device_add+0x3bc/0x790 [ 53.150541][ T4352] device_create+0x183/0x1e0 [ 53.150560][ T4352] ? csi_J+0x697/0x7d0 [ 53.150588][ T4352] ? reset_terminal+0x630/0x650 [ 53.150700][ T4352] vcs_make_sysfs+0x32/0x90 [ 53.150726][ T4352] vc_allocate+0x3ad/0x3e0 [ 53.150782][ T4352] con_install+0x44/0x330 [ 53.150813][ T4352] tty_init_dev+0x7c/0x320 [ 53.150839][ T4352] tty_open+0x6c6/0xb00 [ 53.150947][ T4352] chrdev_open+0x2eb/0x3a0 [ 53.150990][ T4352] do_dentry_open+0x49f/0xa60 [ 53.151010][ T4352] ? __pfx_chrdev_open+0x10/0x10 [ 53.151043][ T4352] vfs_open+0x37/0x1e0 [ 53.151063][ T4352] path_openat+0xc01/0x10d0 [ 53.151117][ T4352] do_file_open+0x16c/0x290 [ 53.151190][ T4352] do_sys_openat2+0xa0/0x130 [ 53.151233][ T4352] __x64_sys_openat+0xf2/0x120 [ 53.151257][ T4352] x64_sys_call+0x1f72/0x2550 [ 53.151281][ T4352] do_syscall_64+0x112/0x360 [ 53.151309][ T4352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.151382][ T4352] RIP: 0033:0x7fbc3c3ce98e [ 53.151401][ T4352] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 53.151419][ T4352] RSP: 002b:00007fbc3ae66b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 53.151513][ T4352] RAX: ffffffffffffffda RBX: 00007fbc3ae676c0 RCX: 00007fbc3c3ce98e [ 53.151529][ T4352] RDX: 0000000000000002 RSI: 00007fbc3ae66c00 RDI: ffffffffffffff9c [ 53.151543][ T4352] RBP: 00007fbc3c4a5024 R08: 0000000000000000 R09: 0000000000000000 [ 53.151557][ T4352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 53.151677][ T4352] R13: 00007fbc3c696038 R14: 00007fbc3c695fa0 R15: 00007fffabfd3388 [ 53.151697][ T4352] [ 53.215559][ T4353] netlink: 12 bytes leftover after parsing attributes in process `syz.2.269'. [ 53.402549][ T4361] set_capacity_and_notify: 18 callbacks suppressed [ 53.402583][ T4361] loop1: detected capacity change from 0 to 1024 [ 53.403801][ T4361] EXT4-fs: test_dummy_encryption option not supported [ 53.515880][ T4370] loop1: detected capacity change from 0 to 512 [ 53.531728][ T4370] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 53.531801][ T4370] EXT4-fs (loop1): orphan cleanup on readonly fs [ 53.532340][ T4370] EXT4-fs warning (device loop1): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 53.532487][ T4370] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 53.532643][ T4370] EXT4-fs error (device loop1): ext4_orphan_get:1403: inode #16: comm syz.1.277: inode has both inline data and extents flags [ 53.532665][ T4370] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 53.532924][ T4370] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.277: couldn't read orphan inode 16 (err -117) [ 53.532954][ T4370] loop1: lost filesystem error report for type 5 error -117 [ 53.599720][ T4367] netlink: 28 bytes leftover after parsing attributes in process `syz.1.277'. [ 53.599792][ T4367] netlink: 28 bytes leftover after parsing attributes in process `syz.1.277'. [ 54.162532][ T4373] ================================================================== [ 54.162558][ T4373] BUG: KCSAN: data-race in filemap_splice_read / filemap_splice_read [ 54.162583][ T4373] [ 54.162588][ T4373] write to 0xffff88810ade9820 of 8 bytes by task 4370 on cpu 1: [ 54.162602][ T4373] filemap_splice_read+0x52a/0x790 [ 54.162621][ T4373] splice_direct_to_actor+0x261/0x680 [ 54.162654][ T4373] do_splice_direct+0x119/0x1a0 [ 54.162684][ T4373] do_sendfile+0x37d/0x640 [ 54.162717][ T4373] __x64_sys_sendfile64+0x105/0x150 [ 54.162745][ T4373] x64_sys_call+0x1015/0x2550 [ 54.162777][ T4373] do_syscall_64+0x112/0x360 [ 54.162800][ T4373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.162821][ T4373] [ 54.162827][ T4373] write to 0xffff88810ade9820 of 8 bytes by task 4373 on cpu 0: [ 54.162845][ T4373] filemap_splice_read+0x52a/0x790 [ 54.162863][ T4373] splice_direct_to_actor+0x261/0x680 [ 54.162891][ T4373] do_splice_direct+0x119/0x1a0 [ 54.162918][ T4373] do_sendfile+0x37d/0x640 [ 54.162949][ T4373] __x64_sys_sendfile64+0x105/0x150 [ 54.162979][ T4373] x64_sys_call+0x1015/0x2550 [ 54.163003][ T4373] do_syscall_64+0x112/0x360 [ 54.163034][ T4373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.163056][ T4373] [ 54.163060][ T4373] value changed: 0x00000000020089a6 -> 0x00000000020089ab [ 54.163072][ T4373] [ 54.163077][ T4373] Reported by Kernel Concurrency Sanitizer on: [ 54.163088][ T4373] CPU: 0 UID: 0 PID: 4373 Comm: syz.1.277 Not tainted syzkaller #0 PREEMPT(lazy) [ 54.163113][ T4373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 54.163124][ T4373] ==================================================================